Task: attack_reconstruction (flaws_cloudtrail)
Prompt: An IAM principal appears to confirm who they are, survey the account’s audit-trail configuration, and then take action to reduce CloudTrail visibility. Identify the responsible principal, the applicable MITRE ATT&CK technique, the supporting CloudTrail record_ids for each phase of the chain, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77c1e141-9776-4a01-9bd9-05478ec9c", "record_id": "flaws_cloudtrail:0000000:77c1e141-9776-4a01-9bd9-05478ec9c", "row_index": 0, "timestamp": "2019-04-11T15:50:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.64.5.29", "user_agent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1078, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77c1e141-9776-4a01-9bd9-05478ec9c", "eventTime": "2019-04-11T15:50:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.64.5.29", "userAgent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUNEsyUmZCMlJsK3F1cFo4YmJCOUpUMFZSZHVyUXJnWldXVVJJem44eXlYa0tQb2pDdllIN2FQMU1GVUMrQUZNQzU2eVlwVkZSYzdLSWNVY3NER3ArcnVxZmtCZmk0N3JsMDRJell2U1p3Y1dPTFR4Z09FcTUwT2hGc2hJNXpBZjFOYlpobEw1M1B5Q1JRaWhKRkhmVEk0SWlKcSs0TDFYUm9IbFZkL1NnTm4yMDBTR3IrT00wT3V2cGZlenZaRFhTMTdTRWFFbUFkUT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f294897b-bc14-4f21-95a8-e366ddd9d9b3", "record_id": "flaws_cloudtrail:0000001:0f294897b-bc14-4f21-95a8-e366ddd9d9b3", "row_index": 1, "timestamp": "2019-04-11T15:50:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.64.5.29", "user_agent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f294897b-bc14-4f21-95a8-e366ddd9d9b3", "eventTime": "2019-04-11T15:50:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.64.5.29", "userAgent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPNzdqbzIvdWhaR1c4d3ZuTnJlTGQreUl1N2hPTk5ZTVp6YkpCeEdBblZwRS9mazA2UzJweG9tWlNXMk8wUlZHUE5CTE01NEFxU1R6SjFEOFlzbFNYeHQ3YlhCMDd3emYxcHhBbUQzR2Q1aGoxc2o0cWdmc0laYVdNem04d0VMcW1wck5tWFMzZUNXQ1lveGhPUHdmalcxaEVoYndWLzM1OEJVL0Z6QU1rNUQ3eFVNZU50Nm1ON3B1dno2YnlDald4ZklNKzU0WU02ZXAvQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f294897b-bc14-4f21-95a8-e366ddd9d9b3", "record_id": "flaws_cloudtrail:0000002:0f294897b-bc14-4f21-95a8-e366ddd9d9b3", "row_index": 2, "timestamp": "2019-04-11T15:50:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.64.5.29", "user_agent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f294897b-bc14-4f21-95a8-e366ddd9d9b3", "eventTime": "2019-04-11T15:50:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.64.5.29", "userAgent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPNzdqbzIvdWhaR1c4d3ZuTnJlTGQreUl1N2hPTk5ZTVp6YkpCeEdBblZwRS9mazA2UzJweG9tWlNXMk8wUlZHUE5CTE01NEFxU1R6SjFEOFlzbFNYeHQ3YlhCMDd3emYxcHhBbUQzR2Q1aGoxc2o0cWdmc0laYVdNem04d0VMcW1wck5tWFMzZUNXQ1lveGhPUHdmalcxaEVoYndWLzM1OEJVL0Z6QU1rNUQ3eFVNZU50Nm1ON3B1dno2YnlDald4ZklNKzU0WU02ZXAvQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6525b77-9a96-4a3e-8491-b398535cfd8", "record_id": "flaws_cloudtrail:0000003:b6525b77-9a96-4a3e-8491-b398535cfd8", "row_index": 3, "timestamp": "2019-04-11T15:50:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.64.5.29", "user_agent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6525b77-9a96-4a3e-8491-b398535cfd8", "eventTime": "2019-04-11T15:50:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.64.5.29", "userAgent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIyTVNjekljOHJCTDFvaFgrbjFEN2JVUWw2S0lEbzdXUHQrNGJ5NXNlRXR2OC9Ma3lFY0p2WVVYWTJrd2Q1WkJ1enUvdGIrbDVoZnp3KytXa1Y5c3Z0bm1PUGRKS2k1VnVzajgybjByQXlxWVZlcjlQU1hJU3k1emFWYnZVY1dhREtNdGNic0dMcWJ0cFB1K0hiU2lxREJyblVzZlJqa3VzeG5SMEZDNGY4cG9EN2JIdXNwZW0rUmkzZkN2bHRmL0hjMGhlcHdhZW84VlVaZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6525b77-9a96-4a3e-8491-b398535cfd8", "record_id": "flaws_cloudtrail:0000004:b6525b77-9a96-4a3e-8491-b398535cfd8", "row_index": 4, "timestamp": "2019-04-11T15:50:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.64.5.29", "user_agent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6525b77-9a96-4a3e-8491-b398535cfd8", "eventTime": "2019-04-11T15:50:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.64.5.29", "userAgent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIyTVNjekljOHJCTDFvaFgrbjFEN2JVUWw2S0lEbzdXUHQrNGJ5NXNlRXR2OC9Ma3lFY0p2WVVYWTJrd2Q1WkJ1enUvdGIrbDVoZnp3KytXa1Y5c3Z0bm1PUGRKS2k1VnVzajgybjByQXlxWVZlcjlQU1hJU3k1emFWYnZVY1dhREtNdGNic0dMcWJ0cFB1K0hiU2lxREJyblVzZlJqa3VzeG5SMEZDNGY4cG9EN2JIdXNwZW0rUmkzZkN2bHRmL0hjMGhlcHdhZW84VlVaZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8dbcb6a1-7862-47c7-8d50-1c44010f85e", "record_id": "flaws_cloudtrail:0000005:8dbcb6a1-7862-47c7-8d50-1c44010f85e", "row_index": 5, "timestamp": "2019-04-11T15:50:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.64.5.29", "user_agent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8dbcb6a1-7862-47c7-8d50-1c44010f85e", "eventTime": "2019-04-11T15:50:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.64.5.29", "userAgent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUQ0xRUUUzZ0xsYnNyN3hvaklFV3B3T2hudFZJUEVuNFBvZXVUdW1YQXpJZzdjdm9ldGYrWEpONGZDQlJxaTh3TUwxTjZ0SjJPRXQ2bGRQVTF6Q0N4d1dBK1FYUU5LeUhWSVNkQ2JZUVJWaTdFNGRXZWxzVGU1NXl0OWtIcVBDejNqbjNNSENrcHBQUmtwbERQcklFUzU3MnY0aGY2d3FDZUtqMWpUM0MvVkdQQm40OHd4NXRCNUo4VEZhcEFDS3c4aExQRFM3ZnBsUEZJUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8dbcb6a1-7862-47c7-8d50-1c44010f85e", "record_id": "flaws_cloudtrail:0000006:8dbcb6a1-7862-47c7-8d50-1c44010f85e", "row_index": 6, "timestamp": "2019-04-11T15:50:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.64.5.29", "user_agent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8dbcb6a1-7862-47c7-8d50-1c44010f85e", "eventTime": "2019-04-11T15:50:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.64.5.29", "userAgent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUQ0xRUUUzZ0xsYnNyN3hvaklFV3B3T2hudFZJUEVuNFBvZXVUdW1YQXpJZzdjdm9ldGYrWEpONGZDQlJxaTh3TUwxTjZ0SjJPRXQ2bGRQVTF6Q0N4d1dBK1FYUU5LeUhWSVNkQ2JZUVJWaTdFNGRXZWxzVGU1NXl0OWtIcVBDejNqbjNNSENrcHBQUmtwbERQcklFUzU3MnY0aGY2d3FDZUtqMWpUM0MvVkdQQm40OHd4NXRCNUo4VEZhcEFDS3c4aExQRFM3ZnBsUEZJUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72d33e3e-c1c1-4c5d-a829-a3e162bf8592", "record_id": "flaws_cloudtrail:0000007:72d33e3e-c1c1-4c5d-a829-a3e162bf8592", "row_index": 7, "timestamp": "2019-04-11T15:50:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.64.5.29", "user_agent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72d33e3e-c1c1-4c5d-a829-a3e162bf8592", "eventTime": "2019-04-11T15:50:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.64.5.29", "userAgent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSTHMrMzZaN0hUU3BnM1U4ZTI4Q01yU0tmRzNXcEFFUk1PUWxoMCtkeHpnWGVRbHJQdXoxQ0J4ZzdrRXJiZkVLNk5TaktvdzJPc3dOU2czRlB0anRyWmdZZVRrd3hBcnZ4RHRCak9JdnI0Nk5RaDBpMVlCMUx5VEx1KzRuTjdSditJRit3akl3Z05mRkZvVXRaclZGUkJId3U4dXYxbFFXVElSeVpubElPS1E1aDErVFJxNW81S2NyNXg3WGpBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72d33e3e-c1c1-4c5d-a829-a3e162bf8592", "record_id": "flaws_cloudtrail:0000008:72d33e3e-c1c1-4c5d-a829-a3e162bf8592", "row_index": 8, "timestamp": "2019-04-11T15:50:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.64.5.29", "user_agent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72d33e3e-c1c1-4c5d-a829-a3e162bf8592", "eventTime": "2019-04-11T15:50:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.64.5.29", "userAgent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSTHMrMzZaN0hUU3BnM1U4ZTI4Q01yU0tmRzNXcEFFUk1PUWxoMCtkeHpnWGVRbHJQdXoxQ0J4ZzdrRXJiZkVLNk5TaktvdzJPc3dOU2czRlB0anRyWmdZZVRrd3hBcnZ4RHRCak9JdnI0Nk5RaDBpMVlCMUx5VEx1KzRuTjdSditJRit3akl3Z05mRkZvVXRaclZGUkJId3U4dXYxbFFXVElSeVpubElPS1E1aDErVFJxNW81S2NyNXg3WGpBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de446f71-43bf-48a6-afda-e4256e4df4e4", "record_id": "flaws_cloudtrail:0000009:de446f71-43bf-48a6-afda-e4256e4df4e4", "row_index": 9, "timestamp": "2019-04-11T15:50:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.64.5.29", "user_agent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de446f71-43bf-48a6-afda-e4256e4df4e4", "eventTime": "2019-04-11T15:50:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.64.5.29", "userAgent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxcHNFek1sU2VTWXpvdWU2L0JQVlBJWVNPb2dMUnpZZVBsOHIwTG1MMEljMGtmYW9Xb2ZscW1DWk1aZlA0Y0FrRWxZUWVoYWhyanlGOHN6YW9WT3F3d0dQVERBZzhqWThXN3pvb09xM1p5Y0wrcmVHak1MSEZEWHFBQU0yV3JtazFVcFhYZ3RUZVo5Zi9jdFVpTmFnUWJ6SVNjSWFSWTFqR2JhUW1ibndGZktGWk9XRk5oRy9Sa0JmNUlrMkxLdEJ2eFBVSFBFNFhTa2VGRlFSTVFpRWMyUXEyUGZlWVFrPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de446f71-43bf-48a6-afda-e4256e4df4e4", "record_id": "flaws_cloudtrail:0000010:de446f71-43bf-48a6-afda-e4256e4df4e4", "row_index": 10, "timestamp": "2019-04-11T15:50:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.64.5.29", "user_agent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de446f71-43bf-48a6-afda-e4256e4df4e4", "eventTime": "2019-04-11T15:50:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.64.5.29", "userAgent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxcHNFek1sU2VTWXpvdWU2L0JQVlBJWVNPb2dMUnpZZVBsOHIwTG1MMEljMGtmYW9Xb2ZscW1DWk1aZlA0Y0FrRWxZUWVoYWhyanlGOHN6YW9WT3F3d0dQVERBZzhqWThXN3pvb09xM1p5Y0wrcmVHak1MSEZEWHFBQU0yV3JtazFVcFhYZ3RUZVo5Zi9jdFVpTmFnUWJ6SVNjSWFSWTFqR2JhUW1ibndGZktGWk9XRk5oRy9Sa0JmNUlrMkxLdEJ2eFBVSFBFNFhTa2VGRlFSTVFpRWMyUXEyUGZlWVFrPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "488ed3bd-f128-42ec-a1d1-51b706937b4", "record_id": "flaws_cloudtrail:0000011:488ed3bd-f128-42ec-a1d1-51b706937b4", "row_index": 11, "timestamp": "2019-04-11T15:50:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.64.5.29", "user_agent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "488ed3bd-f128-42ec-a1d1-51b706937b4", "eventTime": "2019-04-11T15:50:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.64.5.29", "userAgent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5eTVtZmJKdm93YkdwSW03dEFIWW53MTd3ZzBoLzhlenlRT0Z1Z1J4eFRCU2tNdnBEY0VBTnlTa2RGelFkTGh0T3RjS0J1bDlnRHhpWGJaclRDL1h6dEFOcnRaU2p3SlFhZERvcWU0MFUwNFNsRGk1QkVNSEJBengxL3g4c3VkKzJSbDFaWHRMTHEvaDdGMHNVMEhKMlhvdG5qQ1R5Mi9CSFdUNkF1d1lNQXFBanRsYXhUNGxMd3g4V1MzMll1az0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "488ed3bd-f128-42ec-a1d1-51b706937b4", "record_id": "flaws_cloudtrail:0000012:488ed3bd-f128-42ec-a1d1-51b706937b4", "row_index": 12, "timestamp": "2019-04-11T15:50:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.64.5.29", "user_agent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "488ed3bd-f128-42ec-a1d1-51b706937b4", "eventTime": "2019-04-11T15:50:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.64.5.29", "userAgent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5eTVtZmJKdm93YkdwSW03dEFIWW53MTd3ZzBoLzhlenlRT0Z1Z1J4eFRCU2tNdnBEY0VBTnlTa2RGelFkTGh0T3RjS0J1bDlnRHhpWGJaclRDL1h6dEFOcnRaU2p3SlFhZERvcWU0MFUwNFNsRGk1QkVNSEJBengxL3g4c3VkKzJSbDFaWHRMTHEvaDdGMHNVMEhKMlhvdG5qQ1R5Mi9CSFdUNkF1d1lNQXFBanRsYXhUNGxMd3g4V1MzMll1az0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee98d237-e528-4828-9712-8dcf9f8e086d", "record_id": "flaws_cloudtrail:0000013:ee98d237-e528-4828-9712-8dcf9f8e086d", "row_index": 13, "timestamp": "2019-04-11T15:50:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.64.5.29", "user_agent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee98d237-e528-4828-9712-8dcf9f8e086d", "eventTime": "2019-04-11T15:50:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.64.5.29", "userAgent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoWFBrREpleWlIdHprYTlQZk04MUdmR29SWElySVVFcDVPVU1EdWhSQUxENG80MHBhdmJuM0lwT2hmc3pTd1ZTbW1LM0NEMDZLUnlzTVdEenZkS0JHZW11dDJFNXZNWE1FRSthTHNCNy9jVXpsQzFaRFVyZHJDZlQrTG9STUcza3VjTjBnTE13Ym1lcHpqRlo3SkgzU1YyTHNzR2d3SmQ5VU9nWHdqNHllQTIvZTZFVCtOakJKQUF4SHo3TmJWSk1XRlhyaFZ0eWlyclRwaU85SkxvbHhzT01vTGNMclYwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee98d237-e528-4828-9712-8dcf9f8e086d", "record_id": "flaws_cloudtrail:0000014:ee98d237-e528-4828-9712-8dcf9f8e086d", "row_index": 14, "timestamp": "2019-04-11T15:50:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.64.5.29", "user_agent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee98d237-e528-4828-9712-8dcf9f8e086d", "eventTime": "2019-04-11T15:50:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.64.5.29", "userAgent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoWFBrREpleWlIdHprYTlQZk04MUdmR29SWElySVVFcDVPVU1EdWhSQUxENG80MHBhdmJuM0lwT2hmc3pTd1ZTbW1LM0NEMDZLUnlzTVdEenZkS0JHZW11dDJFNXZNWE1FRSthTHNCNy9jVXpsQzFaRFVyZHJDZlQrTG9STUcza3VjTjBnTE13Ym1lcHpqRlo3SkgzU1YyTHNzR2d3SmQ5VU9nWHdqNHllQTIvZTZFVCtOakJKQUF4SHo3TmJWSk1XRlhyaFZ0eWlyclRwaU85SkxvbHhzT01vTGNMclYwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b4ff619-1168-4f54-9498-99a387064e7c", "record_id": "flaws_cloudtrail:0000015:8b4ff619-1168-4f54-9498-99a387064e7c", "row_index": 15, "timestamp": "2019-04-11T15:50:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.64.5.29", "user_agent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b4ff619-1168-4f54-9498-99a387064e7c", "eventTime": "2019-04-11T15:50:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.64.5.29", "userAgent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEeEsrVUtIT2J3WFFoZVBjWDNDamdjcHB5RkRCb1F6VjEwditxSUwzclhEckErMUFKMmpRaDV1dDNzRVNlUWY4NmVUNnV6N2RMaDl4aXpHM1BpT2d2aWNrRHIrS1FMQ3grZ2lrTXBpMS9md2pxU1FlV1Baak1sK3N6QktIYmxYM0QvQ0NFNDlJblNORFY3ZDk2Tm5qbHZBdU5kUlhyeFFsRktpR05UQ2NCUkovSU10aWMxRE1mQVRlSFdWWVV2ND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b4ff619-1168-4f54-9498-99a387064e7c", "record_id": "flaws_cloudtrail:0000016:8b4ff619-1168-4f54-9498-99a387064e7c", "row_index": 16, "timestamp": "2019-04-11T15:50:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.64.5.29", "user_agent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b4ff619-1168-4f54-9498-99a387064e7c", "eventTime": "2019-04-11T15:50:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.64.5.29", "userAgent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEeEsrVUtIT2J3WFFoZVBjWDNDamdjcHB5RkRCb1F6VjEwditxSUwzclhEckErMUFKMmpRaDV1dDNzRVNlUWY4NmVUNnV6N2RMaDl4aXpHM1BpT2d2aWNrRHIrS1FMQ3grZ2lrTXBpMS9md2pxU1FlV1Baak1sK3N6QktIYmxYM0QvQ0NFNDlJblNORFY3ZDk2Tm5qbHZBdU5kUlhyeFFsRktpR05UQ2NCUkovSU10aWMxRE1mQVRlSFdWWVV2ND0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9490c6aa-01e0-4d51-bd51-3b2fbc8561f5", "record_id": "flaws_cloudtrail:0000017:9490c6aa-01e0-4d51-bd51-3b2fbc8561f5", "row_index": 17, "timestamp": "2019-04-11T15:50:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.64.5.29", "user_agent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9490c6aa-01e0-4d51-bd51-3b2fbc8561f5", "eventTime": "2019-04-11T15:50:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.64.5.29", "userAgent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJnMzJmdVpkTHhPQlBlYjJWczhuU2dNYlhDVm90S1FHSk1STGhBQ3g5a1hpM1VNeDltRmd6c25xWVpXQlNPZ29JTEJZZGhCMExNeWhTa2h4aGZWWTlZV3F0aTVHUitFZnJPMmI3K1Nuek80V2pZZGdOaDZjS3ZQM0Q2NzZqbVJzVVVUMVhRL2NERGNPdk03WHRUQzBrOUY1NFFyMHZkeTNBM0JFM1RkeG10azJQWm1HLytxb2dMTEl5b3ZTK0VWbWJYZitDTHZVcmdUUW56ZVhqL09uYnZueFMzNk40N0VzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9490c6aa-01e0-4d51-bd51-3b2fbc8561f5", "record_id": "flaws_cloudtrail:0000018:9490c6aa-01e0-4d51-bd51-3b2fbc8561f5", "row_index": 18, "timestamp": "2019-04-11T15:50:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.64.5.29", "user_agent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9490c6aa-01e0-4d51-bd51-3b2fbc8561f5", "eventTime": "2019-04-11T15:50:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.64.5.29", "userAgent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJnMzJmdVpkTHhPQlBlYjJWczhuU2dNYlhDVm90S1FHSk1STGhBQ3g5a1hpM1VNeDltRmd6c25xWVpXQlNPZ29JTEJZZGhCMExNeWhTa2h4aGZWWTlZV3F0aTVHUitFZnJPMmI3K1Nuek80V2pZZGdOaDZjS3ZQM0Q2NzZqbVJzVVVUMVhRL2NERGNPdk03WHRUQzBrOUY1NFFyMHZkeTNBM0JFM1RkeG10azJQWm1HLytxb2dMTEl5b3ZTK0VWbWJYZitDTHZVcmdUUW56ZVhqL09uYnZueFMzNk40N0VzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9bb290a5-0a69-4336-ad3f-bb83dd4db1e0", "record_id": "flaws_cloudtrail:0000019:9bb290a5-0a69-4336-ad3f-bb83dd4db1e0", "row_index": 19, "timestamp": "2019-04-11T15:50:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.64.5.29", "user_agent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9bb290a5-0a69-4336-ad3f-bb83dd4db1e0", "eventTime": "2019-04-11T15:50:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.64.5.29", "userAgent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1anRFb3NTSzhOOXZTMnV1WVlvU004aGJLWTN4MzRjRjNOSGE5dFBxVElhd0paZkIxVzFRWFc3di9vRFNGL05nQzY0bTJGUk1tQ3JzZFVldFVtTUJrV0x2Zjl1blF4blhxTFVRR0o0d3FPaWZBY1VyOFhScUxsd3dLRHhFZ3EzTmRUMml6aEx3ZWUvNmlmKzFsZkRLMzZPTFFZOWxScm9VZ1dQd1lHNnRpQm5NbzliMzBoWmtDTGoxakNaWjI3bz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9bb290a5-0a69-4336-ad3f-bb83dd4db1e0", "record_id": "flaws_cloudtrail:0000020:9bb290a5-0a69-4336-ad3f-bb83dd4db1e0", "row_index": 20, "timestamp": "2019-04-11T15:50:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.64.5.29", "user_agent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9bb290a5-0a69-4336-ad3f-bb83dd4db1e0", "eventTime": "2019-04-11T15:50:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.64.5.29", "userAgent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1anRFb3NTSzhOOXZTMnV1WVlvU004aGJLWTN4MzRjRjNOSGE5dFBxVElhd0paZkIxVzFRWFc3di9vRFNGL05nQzY0bTJGUk1tQ3JzZFVldFVtTUJrV0x2Zjl1blF4blhxTFVRR0o0d3FPaWZBY1VyOFhScUxsd3dLRHhFZ3EzTmRUMml6aEx3ZWUvNmlmKzFsZkRLMzZPTFFZOWxScm9VZ1dQd1lHNnRpQm5NbzliMzBoWmtDTGoxakNaWjI3bz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac849326b-6589-4714-aaf2-135587e9f2ce2", "record_id": "flaws_cloudtrail:0000021:ac849326b-6589-4714-aaf2-135587e9f2ce2", "row_index": 21, "timestamp": "2019-04-11T15:50:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.64.5.29", "user_agent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1112, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac849326b-6589-4714-aaf2-135587e9f2ce2", "eventTime": "2019-04-11T15:50:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.64.5.29", "userAgent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGa1BUd2RxNmxOb3dLUEZ4WldVNFV2VFE4VHNhU0ZidmorNnJRWmJoUXY0WWlpNTJrdUdXR1VCUEIrMWtTUUJHeHppVFFyckpoMG94UUVwdCtoaE9YRk1FRlI2T3VjWTJGQ0JJMVJBL2kxMm5Hb054TmwwZkVyaFc2ckJxa1grZ3N1bEFnQVFnNkZYWTNGOExhVUNOdEJ4R201R3pQNDQ3bStwb3hTbVZVUFEvS0dkeE04ckhRYk9leldQTGprUGMrQ0ZTc2YwTGdzeHZkNE1OSlJkVDBlWmt0cDBSS2FnPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac849326b-6589-4714-aaf2-135587e9f2ce2", "record_id": "flaws_cloudtrail:0000022:ac849326b-6589-4714-aaf2-135587e9f2ce2", "row_index": 22, "timestamp": "2019-04-11T15:50:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.64.5.29", "user_agent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1112, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac849326b-6589-4714-aaf2-135587e9f2ce2", "eventTime": "2019-04-11T15:50:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.64.5.29", "userAgent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGa1BUd2RxNmxOb3dLUEZ4WldVNFV2VFE4VHNhU0ZidmorNnJRWmJoUXY0WWlpNTJrdUdXR1VCUEIrMWtTUUJHeHppVFFyckpoMG94UUVwdCtoaE9YRk1FRlI2T3VjWTJGQ0JJMVJBL2kxMm5Hb054TmwwZkVyaFc2ckJxa1grZ3N1bEFnQVFnNkZYWTNGOExhVUNOdEJ4R201R3pQNDQ3bStwb3hTbVZVUFEvS0dkeE04ckhRYk9leldQTGprUGMrQ0ZTc2YwTGdzeHZkNE1OSlJkVDBlWmt0cDBSS2FnPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7fbb9d58-fd7f-44eb-8c7f-0b70692e5632", "record_id": "flaws_cloudtrail:0000023:7fbb9d58-fd7f-44eb-8c7f-0b70692e5632", "row_index": 23, "timestamp": "2019-04-11T15:50:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.64.5.29", "user_agent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7fbb9d58-fd7f-44eb-8c7f-0b70692e5632", "eventTime": "2019-04-11T15:50:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.64.5.29", "userAgent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUUU0wMDkxNDh2bFQvQVZmZ3R4RnZ1WWR4RWNHMGRTVkhHd3EzcmYxZVR5WTRjYmRaZFJMbWczbU9Sbjd6dzIxejdHWXlIb1ZNQVk1MGJQVjFWRXZyMUJpWG44UzdTMHFXV2hJUWV4Z2pDTGFISEY0YVRXWmxvYVRzaVRiQUtEM1pnblBZdmxtU2FNMzFTWG5Nc2hDemxCR3lRakdldzVLdjRNYmg0d3ZqZG85VjkwUThpcjhrVk83OG1EdVJiMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7fbb9d58-fd7f-44eb-8c7f-0b70692e5632", "record_id": "flaws_cloudtrail:0000024:7fbb9d58-fd7f-44eb-8c7f-0b70692e5632", "row_index": 24, "timestamp": "2019-04-11T15:50:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.64.5.29", "user_agent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7fbb9d58-fd7f-44eb-8c7f-0b70692e5632", "eventTime": "2019-04-11T15:50:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.64.5.29", "userAgent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUUU0wMDkxNDh2bFQvQVZmZ3R4RnZ1WWR4RWNHMGRTVkhHd3EzcmYxZVR5WTRjYmRaZFJMbWczbU9Sbjd6dzIxejdHWXlIb1ZNQVk1MGJQVjFWRXZyMUJpWG44UzdTMHFXV2hJUWV4Z2pDTGFISEY0YVRXWmxvYVRzaVRiQUtEM1pnblBZdmxtU2FNMzFTWG5Nc2hDemxCR3lRakdldzVLdjRNYmg0d3ZqZG85VjkwUThpcjhrVk83OG1EdVJiMD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aef84fb5-a319-4cb4-93a7-cd74a4640d35", "record_id": "flaws_cloudtrail:0000025:aef84fb5-a319-4cb4-93a7-cd74a4640d35", "row_index": 25, "timestamp": "2019-04-11T15:50:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.64.5.29", "user_agent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aef84fb5-a319-4cb4-93a7-cd74a4640d35", "eventTime": "2019-04-11T15:50:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.64.5.29", "userAgent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrQnRWZTh2eW1HVDUwQVVtSkgwUnkrOFpnQllpS3pYSm5kZEhFMUNFZTNtbVFQbDRsS2xMaVRrSmZvckhuempXWHo3b1hwVENuOWRUeVBYUzdMa041bWlSTlZPck4yNjhEdUN2dUZhVVRoSTg2ZFA3djVjU2VtSmpOTUtXWlgxc2hsOHAyRHhKd20yT1VQcE80NnNFSGhFd3BlWjMyU3VzV05FdGNZUTg4Qlp3M2JGa2k4STVGMVhNWDZIdlVOVVhkUEtoQWtHSlNYcHZ6M3J5Nkp4djFtMWdRYVN6N2RjPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aef84fb5-a319-4cb4-93a7-cd74a4640d35", "record_id": "flaws_cloudtrail:0000026:aef84fb5-a319-4cb4-93a7-cd74a4640d35", "row_index": 26, "timestamp": "2019-04-11T15:50:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.64.5.29", "user_agent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aef84fb5-a319-4cb4-93a7-cd74a4640d35", "eventTime": "2019-04-11T15:50:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.64.5.29", "userAgent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrQnRWZTh2eW1HVDUwQVVtSkgwUnkrOFpnQllpS3pYSm5kZEhFMUNFZTNtbVFQbDRsS2xMaVRrSmZvckhuempXWHo3b1hwVENuOWRUeVBYUzdMa041bWlSTlZPck4yNjhEdUN2dUZhVVRoSTg2ZFA3djVjU2VtSmpOTUtXWlgxc2hsOHAyRHhKd20yT1VQcE80NnNFSGhFd3BlWjMyU3VzV05FdGNZUTg4Qlp3M2JGa2k4STVGMVhNWDZIdlVOVVhkUEtoQWtHSlNYcHZ6M3J5Nkp4djFtMWdRYVN6N2RjPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24126cc-e36c-46f6-aedc-ab12878c898f", "record_id": "flaws_cloudtrail:0000027:24126cc-e36c-46f6-aedc-ab12878c898f", "row_index": 27, "timestamp": "2019-04-11T15:50:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.64.5.29", "user_agent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24126cc-e36c-46f6-aedc-ab12878c898f", "eventTime": "2019-04-11T15:50:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.64.5.29", "userAgent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGd0dEeTYxV1ltdWVFWTNVd2Q3THFhbFFSQ3BEaERsSHgwRkJ5RDhnenY4NnVzNXdCdGxaTVkzZFdZUGs0cWJxeU83NU1XV3VwRXovMk9yNnZLOVRZVWhXenBpRWowbTR1UmhWQVR1ZnpVWHpwZnFaRnhkc1h0REEvL2MwZW4wRmVwdHZwcThtN2U5ZTFwWFQ0UUZxb0Vsd01CTjJJN3lqQzRqRnEzSVZud1piNXV2dnFqMFNJbzl5eUJYOVZGcz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24126cc-e36c-46f6-aedc-ab12878c898f", "record_id": "flaws_cloudtrail:0000028:24126cc-e36c-46f6-aedc-ab12878c898f", "row_index": 28, "timestamp": "2019-04-11T15:50:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.64.5.29", "user_agent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24126cc-e36c-46f6-aedc-ab12878c898f", "eventTime": "2019-04-11T15:50:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.64.5.29", "userAgent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGd0dEeTYxV1ltdWVFWTNVd2Q3THFhbFFSQ3BEaERsSHgwRkJ5RDhnenY4NnVzNXdCdGxaTVkzZFdZUGs0cWJxeU83NU1XV3VwRXovMk9yNnZLOVRZVWhXenBpRWowbTR1UmhWQVR1ZnpVWHpwZnFaRnhkc1h0REEvL2MwZW4wRmVwdHZwcThtN2U5ZTFwWFQ0UUZxb0Vsd01CTjJJN3lqQzRqRnEzSVZud1piNXV2dnFqMFNJbzl5eUJYOVZGcz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0ae6d88-f03d-4d5c-adac-5b0fbdd967f6", "record_id": "flaws_cloudtrail:0000029:e0ae6d88-f03d-4d5c-adac-5b0fbdd967f6", "row_index": 29, "timestamp": "2019-04-11T15:53:40Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.64.5.29", "user_agent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0ae6d88-f03d-4d5c-adac-5b0fbdd967f6", "eventTime": "2019-04-11T15:53:40Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.64.5.29", "userAgent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0ae6d88-f03d-4d5c-adac-5b0fbdd967f6", "record_id": "flaws_cloudtrail:0000030:e0ae6d88-f03d-4d5c-adac-5b0fbdd967f6", "row_index": 30, "timestamp": "2019-04-11T15:53:40Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.64.5.29", "user_agent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0ae6d88-f03d-4d5c-adac-5b0fbdd967f6", "eventTime": "2019-04-11T15:53:40Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.64.5.29", "userAgent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7a09f4a-9c05-4f91-a4d4-7c47687e3add", "record_id": "flaws_cloudtrail:0000031:a7a09f4a-9c05-4f91-a4d4-7c47687e3add", "row_index": 31, "timestamp": "2019-04-11T15:54:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.64.5.29", "user_agent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7a09f4a-9c05-4f91-a4d4-7c47687e3add", "eventTime": "2019-04-11T15:54:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.64.5.29", "userAgent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7a09f4a-9c05-4f91-a4d4-7c47687e3add", "record_id": "flaws_cloudtrail:0000032:a7a09f4a-9c05-4f91-a4d4-7c47687e3add", "row_index": 32, "timestamp": "2019-04-11T15:54:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.64.5.29", "user_agent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7a09f4a-9c05-4f91-a4d4-7c47687e3add", "eventTime": "2019-04-11T15:54:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.64.5.29", "userAgent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de8bc515-905c-434a-9ede-0266d49634cc", "record_id": "flaws_cloudtrail:0000033:de8bc515-905c-434a-9ede-0266d49634cc", "row_index": 33, "timestamp": "2019-04-11T15:57:07Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.64.5.29", "user_agent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de8bc515-905c-434a-9ede-0266d49634cc", "eventTime": "2019-04-11T15:57:07Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.64.5.29", "userAgent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de8bc515-905c-434a-9ede-0266d49634cc", "record_id": "flaws_cloudtrail:0000034:de8bc515-905c-434a-9ede-0266d49634cc", "row_index": 34, "timestamp": "2019-04-11T15:57:07Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.64.5.29", "user_agent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de8bc515-905c-434a-9ede-0266d49634cc", "eventTime": "2019-04-11T15:57:07Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.64.5.29", "userAgent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7db940404-d0a7-4be4-a1a9-f1faba9fa449", "record_id": "flaws_cloudtrail:0000035:7db940404-d0a7-4be4-a1a9-f1faba9fa449", "row_index": 35, "timestamp": "2019-04-11T15:57:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.64.5.29", "user_agent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7db940404-d0a7-4be4-a1a9-f1faba9fa449", "eventTime": "2019-04-11T15:57:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.64.5.29", "userAgent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7db940404-d0a7-4be4-a1a9-f1faba9fa449", "record_id": "flaws_cloudtrail:0000036:7db940404-d0a7-4be4-a1a9-f1faba9fa449", "row_index": 36, "timestamp": "2019-04-11T15:57:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.64.5.29", "user_agent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7db940404-d0a7-4be4-a1a9-f1faba9fa449", "eventTime": "2019-04-11T15:57:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.64.5.29", "userAgent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a77349-3257-4542-9892-6e29397da", "record_id": "flaws_cloudtrail:0000037:4a77349-3257-4542-9892-6e29397da", "row_index": 37, "timestamp": "2019-04-11T16:04:16Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "146.250.81.143", "user_agent": "aws-cli/1.16.24 Python/2.7.16 Darwin/18.2.0 botocore/1.12.14", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a77349-3257-4542-9892-6e29397da", "eventTime": "2019-04-11T16:04:16Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "146.250.81.143", "userAgent": "aws-cli/1.16.24 Python/2.7.16 Darwin/18.2.0 botocore/1.12.14", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a77349-3257-4542-9892-6e29397da", "record_id": "flaws_cloudtrail:0000038:4a77349-3257-4542-9892-6e29397da", "row_index": 38, "timestamp": "2019-04-11T16:04:16Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "146.250.81.143", "user_agent": "aws-cli/1.16.24 Python/2.7.16 Darwin/18.2.0 botocore/1.12.14", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a77349-3257-4542-9892-6e29397da", "eventTime": "2019-04-11T16:04:16Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "146.250.81.143", "userAgent": "aws-cli/1.16.24 Python/2.7.16 Darwin/18.2.0 botocore/1.12.14", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d7fa8e6-83d0-403d-9899-35ab103e664b", "record_id": "flaws_cloudtrail:0000039:9d7fa8e6-83d0-403d-9899-35ab103e664b", "row_index": 39, "timestamp": "2019-04-11T16:11:30Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIA184N4QHBV0DIX54I", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "12.23.254.254", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d7fa8e6-83d0-403d-9899-35ab103e664b", "eventTime": "2019-04-11T16:11:30Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "12.23.254.254", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIA184N4QHBV0DIX54I", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-04-11T16:11:30Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/04/11/[$LATEST]69ba08b4eb88a262442f74ecc03407f0"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ffaf6fb-a11a-41e5-a13a-be2c2f6b69c9", "record_id": "flaws_cloudtrail:0000040:7ffaf6fb-a11a-41e5-a13a-be2c2f6b69c9", "row_index": 40, "timestamp": "2019-04-11T16:11:30Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.8.172.8", "user_agent": "Coral/Netty4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1213, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ffaf6fb-a11a-41e5-a13a-be2c2f6b69c9", "eventTime": "2019-04-11T16:11:30Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.8.172.8", "userAgent": "Coral/Netty4", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIA184N4QHBV0DIX54I", "expiration": "Apr 12, 2019 4:11:30 AM", "sessionToken": "FQoGZXIvYXdzENr//////////wEaDE++YIPp9P56yqnqoSLfAXUA+UujwceQxeLpls6FszuxvPcr5fYraQd0BFyhFpI51BDwyKpzfU/hMA0GJU4N0EWEoE6k4MI585ppnNRkecNhXrd2scmchrMtQd6LyppnU+JsBP2Dww+/U2VRGc0h6vUHfG0SLsu4sbf9x7pTQBMKczuOkuFZFbqsGwNKBrQG+yT9bGbV9BqYSE84sxruTLtklgX32fzkzZPV0ZZN9VHfZkruBU3T9rL+HuJHR376OYtDTmd+b+8YAxP3h/DlvU4JyvWx3cePtUJTd+lrBVvLjgyJ/s3g4iAFtNbiP8soss695QU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8053ca4-844b-4119-8dc8-94438e080be", "record_id": "flaws_cloudtrail:0000041:e8053ca4-844b-4119-8dc8-94438e080be", "row_index": 41, "timestamp": "2019-04-11T16:11:30Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.236.234.224", "user_agent": "Coral/Netty4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1216, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8053ca4-844b-4119-8dc8-94438e080be", "eventTime": "2019-04-11T16:11:30Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.236.234.224", "userAgent": "Coral/Netty4", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIA50FKY4NRR56QV3HM", "expiration": "Apr 12, 2019 4:11:30 AM", "sessionToken": "FQoGZXIvYXdzENr//////////wEaDLD5wilTk61BSRYWaiLfAcFS2B1bB9lPxpkUGDLty/AF5W45o3cyYgo1AEgqP99Mfk5dzKrsImg6DbSnKGURUHXnj2nVNThehBuoTClwULM8zfO4xLKlhagxZQqwS5eAMWroLmOOAzDw8sTY+4VjPGuwrc+JPPgE0XyL3+HT/QlgMXydFULuBWI+K57YImGlKo4sHisXjM3JlQpHVpvT8cwsQqyy4rJKv3yaHZLS1ExMeB6f6F/XFNFcPAhXUnytocr9XRZITi+nNisd+yv7kNoAmjcmvFnGNAzZWyY/kzNqaUSljfPqbeS1C14oLUwoss695QU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d7fa8e6-83d0-403d-9899-35ab103e664b", "record_id": "flaws_cloudtrail:0000042:9d7fa8e6-83d0-403d-9899-35ab103e664b", "row_index": 42, "timestamp": "2019-04-11T16:11:30Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIA184N4QHBV0DIX54I", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "12.23.254.254", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d7fa8e6-83d0-403d-9899-35ab103e664b", "eventTime": "2019-04-11T16:11:30Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "12.23.254.254", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIA184N4QHBV0DIX54I", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-04-11T16:11:30Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/04/11/[$LATEST]69ba08b4eb88a262442f74ecc03407f0"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ffaf6fb-a11a-41e5-a13a-be2c2f6b69c9", "record_id": "flaws_cloudtrail:0000043:7ffaf6fb-a11a-41e5-a13a-be2c2f6b69c9", "row_index": 43, "timestamp": "2019-04-11T16:11:30Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.8.172.8", "user_agent": "Coral/Netty4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1213, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ffaf6fb-a11a-41e5-a13a-be2c2f6b69c9", "eventTime": "2019-04-11T16:11:30Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.8.172.8", "userAgent": "Coral/Netty4", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIA184N4QHBV0DIX54I", "expiration": "Apr 12, 2019 4:11:30 AM", "sessionToken": "FQoGZXIvYXdzENr//////////wEaDE++YIPp9P56yqnqoSLfAXUA+UujwceQxeLpls6FszuxvPcr5fYraQd0BFyhFpI51BDwyKpzfU/hMA0GJU4N0EWEoE6k4MI585ppnNRkecNhXrd2scmchrMtQd6LyppnU+JsBP2Dww+/U2VRGc0h6vUHfG0SLsu4sbf9x7pTQBMKczuOkuFZFbqsGwNKBrQG+yT9bGbV9BqYSE84sxruTLtklgX32fzkzZPV0ZZN9VHfZkruBU3T9rL+HuJHR376OYtDTmd+b+8YAxP3h/DlvU4JyvWx3cePtUJTd+lrBVvLjgyJ/s3g4iAFtNbiP8soss695QU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8053ca4-844b-4119-8dc8-94438e080be", "record_id": "flaws_cloudtrail:0000044:e8053ca4-844b-4119-8dc8-94438e080be", "row_index": 44, "timestamp": "2019-04-11T16:11:30Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.236.234.224", "user_agent": "Coral/Netty4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1216, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8053ca4-844b-4119-8dc8-94438e080be", "eventTime": "2019-04-11T16:11:30Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.236.234.224", "userAgent": "Coral/Netty4", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIA50FKY4NRR56QV3HM", "expiration": "Apr 12, 2019 4:11:30 AM", "sessionToken": "FQoGZXIvYXdzENr//////////wEaDLD5wilTk61BSRYWaiLfAcFS2B1bB9lPxpkUGDLty/AF5W45o3cyYgo1AEgqP99Mfk5dzKrsImg6DbSnKGURUHXnj2nVNThehBuoTClwULM8zfO4xLKlhagxZQqwS5eAMWroLmOOAzDw8sTY+4VjPGuwrc+JPPgE0XyL3+HT/QlgMXydFULuBWI+K57YImGlKo4sHisXjM3JlQpHVpvT8cwsQqyy4rJKv3yaHZLS1ExMeB6f6F/XFNFcPAhXUnytocr9XRZITi+nNisd+yv7kNoAmjcmvFnGNAzZWyY/kzNqaUSljfPqbeS1C14oLUwoss695QU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "badcec52-d6a9-40f9-a251-ebf798c78cd7", "record_id": "flaws_cloudtrail:0000045:badcec52-d6a9-40f9-a251-ebf798c78cd7", "row_index": 45, "timestamp": "2019-04-11T16:27:05Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.93.5.80", "user_agent": "Coral/Netty4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "badcec52-d6a9-40f9-a251-ebf798c78cd7", "eventTime": "2019-04-11T16:27:05Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.93.5.80", "userAgent": "Coral/Netty4", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAC0AHLT8FXD9YPRBH", "expiration": "Apr 11, 2019 10:54:27 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "badcec52-d6a9-40f9-a251-ebf798c78cd7", "record_id": "flaws_cloudtrail:0000046:badcec52-d6a9-40f9-a251-ebf798c78cd7", "row_index": 46, "timestamp": "2019-04-11T16:27:05Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.93.5.80", "user_agent": "Coral/Netty4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "badcec52-d6a9-40f9-a251-ebf798c78cd7", "eventTime": "2019-04-11T16:27:05Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.93.5.80", "userAgent": "Coral/Netty4", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAC0AHLT8FXD9YPRBH", "expiration": "Apr 11, 2019 10:54:27 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00eda331-0674-49ef-97c3-664ad328982", "record_id": "flaws_cloudtrail:0000047:00eda331-0674-49ef-97c3-664ad328982", "row_index": 47, "timestamp": "2019-04-11T16:38:06Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.64.5.29", "user_agent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00eda331-0674-49ef-97c3-664ad328982", "eventTime": "2019-04-11T16:38:06Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.64.5.29", "userAgent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00eda331-0674-49ef-97c3-664ad328982", "record_id": "flaws_cloudtrail:0000048:00eda331-0674-49ef-97c3-664ad328982", "row_index": 48, "timestamp": "2019-04-11T16:38:06Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.64.5.29", "user_agent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00eda331-0674-49ef-97c3-664ad328982", "eventTime": "2019-04-11T16:38:06Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.64.5.29", "userAgent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af05e029-4e53-4a90-bf55-d713171b779", "record_id": "flaws_cloudtrail:0000049:af05e029-4e53-4a90-bf55-d713171b779", "row_index": 49, "timestamp": "2019-04-11T16:39:00Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.64.5.29", "user_agent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af05e029-4e53-4a90-bf55-d713171b779", "eventTime": "2019-04-11T16:39:00Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.64.5.29", "userAgent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af05e029-4e53-4a90-bf55-d713171b779", "record_id": "flaws_cloudtrail:0000050:af05e029-4e53-4a90-bf55-d713171b779", "row_index": 50, "timestamp": "2019-04-11T16:39:00Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.64.5.29", "user_agent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af05e029-4e53-4a90-bf55-d713171b779", "eventTime": "2019-04-11T16:39:00Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.64.5.29", "userAgent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b9ec590-509b-4a3f-9a61-d847a4b35af1", "record_id": "flaws_cloudtrail:0000051:4b9ec590-509b-4a3f-9a61-d847a4b35af1", "row_index": 51, "timestamp": "2019-04-11T16:55:58Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.92.179.183", "user_agent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b9ec590-509b-4a3f-9a61-d847a4b35af1", "eventTime": "2019-04-11T16:55:58Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.92.179.183", "userAgent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b9ec590-509b-4a3f-9a61-d847a4b35af1", "record_id": "flaws_cloudtrail:0000052:4b9ec590-509b-4a3f-9a61-d847a4b35af1", "row_index": 52, "timestamp": "2019-04-11T16:55:58Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.92.179.183", "user_agent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b9ec590-509b-4a3f-9a61-d847a4b35af1", "eventTime": "2019-04-11T16:55:58Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.92.179.183", "userAgent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e47d8173-aef4-4a04-ab20-84bceb65cc5f", "record_id": "flaws_cloudtrail:0000053:e47d8173-aef4-4a04-ab20-84bceb65cc5f", "row_index": 53, "timestamp": "2019-04-11T17:26:15Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.92.179.183", "user_agent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e47d8173-aef4-4a04-ab20-84bceb65cc5f", "eventTime": "2019-04-11T17:26:15Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.92.179.183", "userAgent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e47d8173-aef4-4a04-ab20-84bceb65cc5f", "record_id": "flaws_cloudtrail:0000054:e47d8173-aef4-4a04-ab20-84bceb65cc5f", "row_index": 54, "timestamp": "2019-04-11T17:26:15Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.92.179.183", "user_agent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e47d8173-aef4-4a04-ab20-84bceb65cc5f", "eventTime": "2019-04-11T17:26:15Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.92.179.183", "userAgent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d920be7a-f063-4894-9a19-db4dbb46b4d2", "record_id": "flaws_cloudtrail:0000055:d920be7a-f063-4894-9a19-db4dbb46b4d2", "row_index": 55, "timestamp": "2019-04-11T17:27:05Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.93.5.80", "user_agent": "Coral/Netty4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d920be7a-f063-4894-9a19-db4dbb46b4d2", "eventTime": "2019-04-11T17:27:05Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.93.5.80", "userAgent": "Coral/Netty4", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAK06BPCMOWB22O4XJ", "expiration": "Apr 11, 2019 11:53:28 PM", "sessionToken": "AgoJb3JpZ2luX2VjEMr//////////wEaCXVzLXdlc3QtMiJGMEQCIDKcQnr9PAyTd8GOof3ktWECzqo8kCdb7nLrySa2a3EXAiAWdFrUk7071Mq7l32Aou/khNlw+DOwgvnhPR54XJnKUCrjAwiT//////////8BEAAaDDk3NTQyNjI2MjAyOSIM5bFRl+R7iM1pOExfKrcD2zrY4Yc07lAG+/ON76MfKyCYPooV5EaBTAnFL6qLTn0X2rXaNepJO9XsztNaNrPuei8kmmjr3a+cQrfvaTW0pPHcRlx1nXe8WbotLG+81yMdga4KLujix5DB62DizJ2F6F3Do6GP8xsz8hgG96d4t2YUoLAJfw68zhuYDiqGHuiIqqiBBx6erXZxoXRTkg+aHEOL44r8V/KQIFMUH0n06eHdfyPQgrggByRrDck7B0zQAcfnQwlOXkNsEYVLAYnWoeK0T2nAa0Y1d8LmwClLmQv9mApOVJ7T710JOXdSxsueWaRIKq7EXT3CxNtPd4d40SKyPektY21Q6QUhDWXfekE9yPGofNH8fHuDqCXTbFfoHk1G04BGnMGAtsxx0KLvrz8HXQ6j8tbkgPyL27g4znIwZemhysyUHilM6espRE3tj2LoyFhX+zwGlgr2yUs3cT7NSQC3fhvrrqYNhRKVPxwzD1b5piZkmJjbVpf5l8A16HVOsFxUwnXuMGxYxRVy6WdBqr8NrLG8nod6Uu4tq9x5GlP/fjc4dHiA7AJXVQUN76LbdHixDtuOI6uyuYDuyOxioahtWDDp8b3lBTq1AYSxAqDdjSu3e9Q9CseEEImaNQz+1whI8mZCYhZs7b43m2Y9u4TEXqwUfTNqsSEXAaqFxrtrIWnmgS61gew3TfTzj4jedmsFSzi6IEvb0WCNkjYNUTiMwzdP2rcIJZLhIM9JFHs6o54PqKA6lC2hIFSQv8C829kygaiITybLcW1GBeWNt9LUO7dfFyVQcP7Pfi9Rb6R31CL9u66TSrB5obS7lIZAdE701XNJwkgP0b8ld4QuN6E="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d920be7a-f063-4894-9a19-db4dbb46b4d2", "record_id": "flaws_cloudtrail:0000056:d920be7a-f063-4894-9a19-db4dbb46b4d2", "row_index": 56, "timestamp": "2019-04-11T17:27:05Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.93.5.80", "user_agent": "Coral/Netty4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d920be7a-f063-4894-9a19-db4dbb46b4d2", "eventTime": "2019-04-11T17:27:05Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.93.5.80", "userAgent": "Coral/Netty4", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAK06BPCMOWB22O4XJ", "expiration": "Apr 11, 2019 11:53:28 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a287750f-b158-4971-9774-be2df2c85449", "record_id": "flaws_cloudtrail:0000057:a287750f-b158-4971-9774-be2df2c85449", "row_index": 57, "timestamp": "2019-04-11T17:29:01Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.92.179.183", "user_agent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a287750f-b158-4971-9774-be2df2c85449", "eventTime": "2019-04-11T17:29:01Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.92.179.183", "userAgent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a287750f-b158-4971-9774-be2df2c85449", "record_id": "flaws_cloudtrail:0000058:a287750f-b158-4971-9774-be2df2c85449", "row_index": 58, "timestamp": "2019-04-11T17:29:01Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "7.92.179.183", "user_agent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a287750f-b158-4971-9774-be2df2c85449", "eventTime": "2019-04-11T17:29:01Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "7.92.179.183", "userAgent": "aws-cli/1.16.140 Python/2.7.15+ Linux/4.18.0-kali2-amd64 botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "774f1737-7d0f-4ed8-b635-42b0fbfe9b5e", "record_id": "flaws_cloudtrail:0000059:774f1737-7d0f-4ed8-b635-42b0fbfe9b5e", "row_index": 59, "timestamp": "2019-04-11T18:16:57Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.240.194.6", "user_agent": "aws-internal/3 aws-sdk-java/1.11.526 Linux/4.9.137-0.1.ac.218.74.329.metal1.x86_64 OpenJDK_64-Bit_Server_VM/25.202-b08 java/1.8.0_202 vendor/Oracle_Corporation", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 2065, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "774f1737-7d0f-4ed8-b635-42b0fbfe9b5e", "eventTime": "2019-04-11T18:16:57Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.240.194.6", "userAgent": "aws-internal/3 aws-sdk-java/1.11.526 Linux/4.9.137-0.1.ac.218.74.329.metal1.x86_64 OpenJDK_64-Bit_Server_VM/25.202-b08 java/1.8.0_202 vendor/Oracle_Corporation", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIATRJ5BFUCLFQ8GPXQ", "expiration": "Apr 11, 2019 7:16:57 PM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "774f1737-7d0f-4ed8-b635-42b0fbfe9b5e", "record_id": "flaws_cloudtrail:0000060:774f1737-7d0f-4ed8-b635-42b0fbfe9b5e", "row_index": 60, "timestamp": "2019-04-11T18:16:57Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.240.194.6", "user_agent": "aws-internal/3 aws-sdk-java/1.11.526 Linux/4.9.137-0.1.ac.218.74.329.metal1.x86_64 OpenJDK_64-Bit_Server_VM/25.202-b08 java/1.8.0_202 vendor/Oracle_Corporation", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 2065, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "774f1737-7d0f-4ed8-b635-42b0fbfe9b5e", "eventTime": "2019-04-11T18:16:57Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.240.194.6", "userAgent": "aws-internal/3 aws-sdk-java/1.11.526 Linux/4.9.137-0.1.ac.218.74.329.metal1.x86_64 OpenJDK_64-Bit_Server_VM/25.202-b08 java/1.8.0_202 vendor/Oracle_Corporation", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIATRJ5BFUCLFQ8GPXQ", "expiration": "Apr 11, 2019 7:16:57 PM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5dd31381-1d85-40e6-87f7-1cf30d1298d1", "record_id": "flaws_cloudtrail:0000061:5dd31381-1d85-40e6-87f7-1cf30d1298d1", "row_index": 61, "timestamp": "2019-04-11T18:19:37Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "146.250.81.143", "user_agent": "aws-cli/1.16.24 Python/2.7.16 Darwin/18.2.0 botocore/1.12.14", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5dd31381-1d85-40e6-87f7-1cf30d1298d1", "eventTime": "2019-04-11T18:19:37Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "146.250.81.143", "userAgent": "aws-cli/1.16.24 Python/2.7.16 Darwin/18.2.0 botocore/1.12.14", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5dd31381-1d85-40e6-87f7-1cf30d1298d1", "record_id": "flaws_cloudtrail:0000062:5dd31381-1d85-40e6-87f7-1cf30d1298d1", "row_index": 62, "timestamp": "2019-04-11T18:19:37Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "146.250.81.143", "user_agent": "aws-cli/1.16.24 Python/2.7.16 Darwin/18.2.0 botocore/1.12.14", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5dd31381-1d85-40e6-87f7-1cf30d1298d1", "eventTime": "2019-04-11T18:19:37Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "146.250.81.143", "userAgent": "aws-cli/1.16.24 Python/2.7.16 Darwin/18.2.0 botocore/1.12.14", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a97a448-10d8-4a08-a3e8-e290e36f343b", "record_id": "flaws_cloudtrail:0000063:6a97a448-10d8-4a08-a3e8-e290e36f343b", "row_index": 63, "timestamp": "2019-04-11T18:27:05Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.93.5.80", "user_agent": "Coral/Netty4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a97a448-10d8-4a08-a3e8-e290e36f343b", "eventTime": "2019-04-11T18:27:05Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.93.5.80", "userAgent": "Coral/Netty4", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAEFSMUDKG2MFYBKLT", "expiration": "Apr 12, 2019 12:45:09 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a97a448-10d8-4a08-a3e8-e290e36f343b", "record_id": "flaws_cloudtrail:0000064:6a97a448-10d8-4a08-a3e8-e290e36f343b", "row_index": 64, "timestamp": "2019-04-11T18:27:05Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.93.5.80", "user_agent": "Coral/Netty4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a97a448-10d8-4a08-a3e8-e290e36f343b", "eventTime": "2019-04-11T18:27:05Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.93.5.80", "userAgent": "Coral/Netty4", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAEFSMUDKG2MFYBKLT", "expiration": "Apr 12, 2019 12:45:09 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "acdfe22a-2a37-4366-9e3a-0a9620bfa6fc", "record_id": "flaws_cloudtrail:0000065:acdfe22a-2a37-4366-9e3a-0a9620bfa6fc", "row_index": 65, "timestamp": "2019-04-11T19:27:05Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.93.5.80", "user_agent": "Coral/Netty4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1884, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "acdfe22a-2a37-4366-9e3a-0a9620bfa6fc", "eventTime": "2019-04-11T19:27:05Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.93.5.80", "userAgent": "Coral/Netty4", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAPWFID9S565EMJMEZ", "expiration": "Apr 12, 2019 1:55:19 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "acdfe22a-2a37-4366-9e3a-0a9620bfa6fc", "record_id": "flaws_cloudtrail:0000066:acdfe22a-2a37-4366-9e3a-0a9620bfa6fc", "row_index": 66, "timestamp": "2019-04-11T19:27:05Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.93.5.80", "user_agent": "Coral/Netty4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1884, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "acdfe22a-2a37-4366-9e3a-0a9620bfa6fc", "eventTime": "2019-04-11T19:27:05Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.93.5.80", "userAgent": "Coral/Netty4", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAPWFID9S565EMJMEZ", "expiration": "Apr 12, 2019 1:55:19 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c95be7c9-a621-48e1-a6c5-ddbdd991ca6d", "record_id": "flaws_cloudtrail:0000067:c95be7c9-a621-48e1-a6c5-ddbdd991ca6d", "row_index": 67, "timestamp": "2019-04-11T20:27:05Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.93.5.80", "user_agent": "Coral/Netty4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c95be7c9-a621-48e1-a6c5-ddbdd991ca6d", "eventTime": "2019-04-11T20:27:05Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.93.5.80", "userAgent": "Coral/Netty4", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA779BFQ1DTQE7E41B", "expiration": "Apr 12, 2019 2:40:09 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c95be7c9-a621-48e1-a6c5-ddbdd991ca6d", "record_id": "flaws_cloudtrail:0000068:c95be7c9-a621-48e1-a6c5-ddbdd991ca6d", "row_index": 68, "timestamp": "2019-04-11T20:27:05Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.93.5.80", "user_agent": "Coral/Netty4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c95be7c9-a621-48e1-a6c5-ddbdd991ca6d", "eventTime": "2019-04-11T20:27:05Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.93.5.80", "userAgent": "Coral/Netty4", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA779BFQ1DTQE7E41B", "expiration": "Apr 12, 2019 2:40:09 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29ffadbf-dee4-4c3d-86a6-3378b673772", "record_id": "flaws_cloudtrail:0000069:29ffadbf-dee4-4c3d-86a6-3378b673772", "row_index": 69, "timestamp": "2019-04-11T20:34:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "205.254.251.68", "user_agent": "aws-cli/1.16.140 Python/2.7.12 Linux/4.4.0-145-generic botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29ffadbf-dee4-4c3d-86a6-3378b673772", "eventTime": "2019-04-11T20:34:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "205.254.251.68", "userAgent": "aws-cli/1.16.140 Python/2.7.12 Linux/4.4.0-145-generic botocore/1.12.130", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29ffadbf-dee4-4c3d-86a6-3378b673772", "record_id": "flaws_cloudtrail:0000070:29ffadbf-dee4-4c3d-86a6-3378b673772", "row_index": 70, "timestamp": "2019-04-11T20:34:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "205.254.251.68", "user_agent": "aws-cli/1.16.140 Python/2.7.12 Linux/4.4.0-145-generic botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29ffadbf-dee4-4c3d-86a6-3378b673772", "eventTime": "2019-04-11T20:34:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "205.254.251.68", "userAgent": "aws-cli/1.16.140 Python/2.7.12 Linux/4.4.0-145-generic botocore/1.12.130", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "398e3619-9d70-48b2-ab86-4e2c8bcf3891", "record_id": "flaws_cloudtrail:0000071:398e3619-9d70-48b2-ab86-4e2c8bcf3891", "row_index": 71, "timestamp": "2019-04-11T20:37:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "205.254.251.68", "user_agent": "aws-cli/1.16.140 Python/2.7.12 Linux/4.4.0-145-generic botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "398e3619-9d70-48b2-ab86-4e2c8bcf3891", "eventTime": "2019-04-11T20:37:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "205.254.251.68", "userAgent": "aws-cli/1.16.140 Python/2.7.12 Linux/4.4.0-145-generic botocore/1.12.130", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "398e3619-9d70-48b2-ab86-4e2c8bcf3891", "record_id": "flaws_cloudtrail:0000072:398e3619-9d70-48b2-ab86-4e2c8bcf3891", "row_index": 72, "timestamp": "2019-04-11T20:37:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "205.254.251.68", "user_agent": "aws-cli/1.16.140 Python/2.7.12 Linux/4.4.0-145-generic botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "398e3619-9d70-48b2-ab86-4e2c8bcf3891", "eventTime": "2019-04-11T20:37:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "205.254.251.68", "userAgent": "aws-cli/1.16.140 Python/2.7.12 Linux/4.4.0-145-generic botocore/1.12.130", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66687fd-61c7-4013-9cdf-e5c2950b1d98", "record_id": "flaws_cloudtrail:0000073:66687fd-61c7-4013-9cdf-e5c2950b1d98", "row_index": 73, "timestamp": "2019-04-11T21:20:25Z", "event_type": "CreateSecurityGroup", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "167.7.250.253", "user_agent": "Boto/2.46.1 Python/2.7.15 Darwin/17.7.0", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66687fd-61c7-4013-9cdf-e5c2950b1d98", "eventTime": "2019-04-11T21:20:25Z", "eventName": "CreateSecurityGroup", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "167.7.250.253", "userAgent": "Boto/2.46.1 Python/2.7.15 Darwin/17.7.0", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"groupName": "test-mms-sg", "groupDescription": "Only allow access from BW office IP", "vpcId": "vpc-e6a539db"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3deeb6da-e8e9-4cf4-b0ee-fbe9aedaad2c", "record_id": "flaws_cloudtrail:0000074:3deeb6da-e8e9-4cf4-b0ee-fbe9aedaad2c", "row_index": 74, "timestamp": "2019-04-11T21:20:25Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "167.7.250.253", "user_agent": "Boto/2.46.1 Python/2.7.15 Darwin/17.7.0", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3deeb6da-e8e9-4cf4-b0ee-fbe9aedaad2c", "eventTime": "2019-04-11T21:20:25Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "167.7.250.253", "userAgent": "Boto/2.46.1 Python/2.7.15 Darwin/17.7.0", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66687fd-61c7-4013-9cdf-e5c2950b1d98", "record_id": "flaws_cloudtrail:0000075:66687fd-61c7-4013-9cdf-e5c2950b1d98", "row_index": 75, "timestamp": "2019-04-11T21:20:25Z", "event_type": "CreateSecurityGroup", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "167.7.250.253", "user_agent": "Boto/2.46.1 Python/2.7.15 Darwin/17.7.0", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66687fd-61c7-4013-9cdf-e5c2950b1d98", "eventTime": "2019-04-11T21:20:25Z", "eventName": "CreateSecurityGroup", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "167.7.250.253", "userAgent": "Boto/2.46.1 Python/2.7.15 Darwin/17.7.0", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"groupName": "test-mms-sg", "groupDescription": "Only allow access from BW office IP", "vpcId": "vpc-e6a539db"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3deeb6da-e8e9-4cf4-b0ee-fbe9aedaad2c", "record_id": "flaws_cloudtrail:0000076:3deeb6da-e8e9-4cf4-b0ee-fbe9aedaad2c", "row_index": 76, "timestamp": "2019-04-11T21:20:25Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "167.7.250.253", "user_agent": "Boto/2.46.1 Python/2.7.15 Darwin/17.7.0", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3deeb6da-e8e9-4cf4-b0ee-fbe9aedaad2c", "eventTime": "2019-04-11T21:20:25Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "167.7.250.253", "userAgent": "Boto/2.46.1 Python/2.7.15 Darwin/17.7.0", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e82c6760-2828-4090-ad95-7a9db607efd6", "record_id": "flaws_cloudtrail:0000077:e82c6760-2828-4090-ad95-7a9db607efd6", "row_index": 77, "timestamp": "2019-04-11T21:27:05Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.93.5.80", "user_agent": "Coral/Netty4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1879, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e82c6760-2828-4090-ad95-7a9db607efd6", "eventTime": "2019-04-11T21:27:05Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.93.5.80", "userAgent": "Coral/Netty4", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA0AJH3RUR0UCHGFLK", "expiration": "Apr 12, 2019 3:56:43 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e82c6760-2828-4090-ad95-7a9db607efd6", "record_id": "flaws_cloudtrail:0000078:e82c6760-2828-4090-ad95-7a9db607efd6", "row_index": 78, "timestamp": "2019-04-11T21:27:05Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.93.5.80", "user_agent": "Coral/Netty4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1879, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e82c6760-2828-4090-ad95-7a9db607efd6", "eventTime": "2019-04-11T21:27:05Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.93.5.80", "userAgent": "Coral/Netty4", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA0AJH3RUR0UCHGFLK", "expiration": "Apr 12, 2019 3:56:43 AM", "sessionToken": "AgoJb3JpZ2luX2VjEM7//////////wEaCXVzLXdlc3QtMiJGMEQCIBfua6AvCXz0FZ+8EaAI1JyohRGEma+XIpQpZRDNV7IPAiBP/MrqCzFXOrI0T62lcf7lcJ2HGeygXNk8UOOSyzC7SirjAwiX//////////8BEAAaDDk3NTQyNjI2MjAyOSIMKNtZ+hf6gmtnrH3BKrcDVUthKN2vawpFb8IYVkrDR8w3DyOHfdOrYvEZzG2iKdw2aaRYEExQYX+X4E2R1XVcq2aU6lHiEX7+nKXK+ggxB53FRI1Reft1TBtVt9V5KGgaBhnzYW+yVte9+S6E8dCOIHWHo9QkLureKuDYu3rN0nzc9+fEp4WQob7EHqZohDIXDq6Yo0bQB0BAvMRo1JXKMI35iGms13oApbApu77JJkaPMMTqf8RKtgG1BZtWVQQfXfRLwdRDpk0z0aGNHs5ypc8yZcL5qN9s69tSZBxgkLXqwo2yeyekFtlzw5BvOiIL67MVLF1nOqiukfAYuHwxJP/Uu41dJ8vi2RA4LFkf5d69ZlTJ/GmC9FH5uLcsyNoq4gszPdFhQbic+TL7+yui0495I2iVXXn5lEvfWrtxKutNlMc9Hh34j2rR8ZVek5eWn5/DGsJNA/bit7c9f/H7NwHBRgLdkzwjeBQhuaTcgxpLuzKPX8mvdt1hyxHxll+OyoSruaLyeIu7YdXh4vHuwsQAMezIP7lxSm50/KA7LsPtvCJzb+SOeJPu1SkgYAlMDZPEW1dAhTN0iVpMoe3+YZoPKvMnUzCp4r7lBTq1AZystA3AsC5TRLPkbUwDUMGb/ghSf39WuMpDfOpjKbKlzYe0aRMVFeaBMS92vs+ptraPKiv63Ebl6CQNHP/oZV6TTLJGs1nRMfMgOAi2EiUVgCD0Lw0OQbwOWlOUH53Nc/xMOufB287Uu4SGIN6QnCKUNl22IdKDF3m1mjXb+K3WHhbQ1ItLGQ8LkqaOKTp7GCfmBtvavdz4jWIBolFUVFe20xpvCgs89hjIckZz9VzmTHmBHlM="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa93d69c-35b9-4c46-9c2b-ab097af84459", "record_id": "flaws_cloudtrail:0000079:fa93d69c-35b9-4c46-9c2b-ab097af84459", "row_index": 79, "timestamp": "2019-04-11T22:10:41Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.236.234.224", "user_agent": "Coral/Netty4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1218, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa93d69c-35b9-4c46-9c2b-ab097af84459", "eventTime": "2019-04-11T22:10:41Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.236.234.224", "userAgent": "Coral/Netty4", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAOJHKWREGKQXEKRDX", "expiration": "Apr 12, 2019 10:10:41 AM", "sessionToken": "FQoGZXIvYXdzEOD//////////wEaDL5oMd+OJ1vV8/xkpSLfAZZnON/LoBBNHD0PNaQCzYWO9bAC1DAwODFoCxCAZPEEGC9mcknEBRQZgORS477FUAqtEHP80cvS2W8ZhpqnvM5lkYcmv9qb+ldo92rNSA2ntvKxNr4SVWMkwNerNblEMaZA7QTRxW3z0s1R8U4stfwNMFHHYbStkXRMvxzlIpUfnCKXqSE2sgYeC/s5JzMMiAkwkpFttJjrrlDsO4/6R+ThR/5llNmZRHnNelWdlsV9BnM9OnsEJgHXdA/yF0cir3epXpCufZy/INRn1K/GPlga9aqIM6rHKtOykBzwDYco4fa+5QU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32207bd0-06ba-4551-931a-b3ae96c4e4a7", "record_id": "flaws_cloudtrail:0000080:32207bd0-06ba-4551-931a-b3ae96c4e4a7", "row_index": 80, "timestamp": "2019-04-11T22:10:41Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.8.172.8", "user_agent": "Coral/Netty4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1214, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32207bd0-06ba-4551-931a-b3ae96c4e4a7", "eventTime": "2019-04-11T22:10:41Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.8.172.8", "userAgent": "Coral/Netty4", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIA6DD9UWLCV4GJHVNN", "expiration": "Apr 12, 2019 10:10:41 AM", "sessionToken": "FQoGZXIvYXdzEOD//////////wEaDMn/Y+DCJbd+qr5DgyLfAT5q7f74ObfChST3qC0HmvfWnRuSL9/RxIWAmNsYzsqQiob/s8a5ZQHcIMMfMDp7nrbETDThwQVb0/yAA64vCn0whDG/eVHzfdJ66AzeXRjUX7FcBTZ/2WO0pffruMWH1SfBPBerbkyRV7Hsupi2p3C28g0tla45j86d6+bg/FqIFBm4vb+qwJxViiFZEqfpBVGhKhWDsC6EztxY0nMbXOGQlsIVtHHml/S7uuSVdwNrN2PgJOLKhuH/xRUDCASgkRB+h6fuvW/FUdtHY7rrHhvr6kuIfF/Nqo/WXK3y5Uso4fa+5QU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b0c1f17-eb89-4827-924a-bdbace9ed9f3", "record_id": "flaws_cloudtrail:0000081:0b0c1f17-eb89-4827-924a-bdbace9ed9f3", "row_index": 81, "timestamp": "2019-04-11T22:10:41Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIA6DD9UWLCV4GJHVNN", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "251.206.230.5", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b0c1f17-eb89-4827-924a-bdbace9ed9f3", "eventTime": "2019-04-11T22:10:41Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.206.230.5", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIA6DD9UWLCV4GJHVNN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-04-11T22:10:41Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/04/11/[$LATEST]ee05772d4c74e63e4e55e8a83608628a", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa93d69c-35b9-4c46-9c2b-ab097af84459", "record_id": "flaws_cloudtrail:0000082:fa93d69c-35b9-4c46-9c2b-ab097af84459", "row_index": 82, "timestamp": "2019-04-11T22:10:41Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "253.236.234.224", "user_agent": "Coral/Netty4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1218, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa93d69c-35b9-4c46-9c2b-ab097af84459", "eventTime": "2019-04-11T22:10:41Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "253.236.234.224", "userAgent": "Coral/Netty4", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAOJHKWREGKQXEKRDX", "expiration": "Apr 12, 2019 10:10:41 AM", "sessionToken": "FQoGZXIvYXdzEOD//////////wEaDL5oMd+OJ1vV8/xkpSLfAZZnON/LoBBNHD0PNaQCzYWO9bAC1DAwODFoCxCAZPEEGC9mcknEBRQZgORS477FUAqtEHP80cvS2W8ZhpqnvM5lkYcmv9qb+ldo92rNSA2ntvKxNr4SVWMkwNerNblEMaZA7QTRxW3z0s1R8U4stfwNMFHHYbStkXRMvxzlIpUfnCKXqSE2sgYeC/s5JzMMiAkwkpFttJjrrlDsO4/6R+ThR/5llNmZRHnNelWdlsV9BnM9OnsEJgHXdA/yF0cir3epXpCufZy/INRn1K/GPlga9aqIM6rHKtOykBzwDYco4fa+5QU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32207bd0-06ba-4551-931a-b3ae96c4e4a7", "record_id": "flaws_cloudtrail:0000083:32207bd0-06ba-4551-931a-b3ae96c4e4a7", "row_index": 83, "timestamp": "2019-04-11T22:10:41Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.8.172.8", "user_agent": "Coral/Netty4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1214, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32207bd0-06ba-4551-931a-b3ae96c4e4a7", "eventTime": "2019-04-11T22:10:41Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.8.172.8", "userAgent": "Coral/Netty4", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIA6DD9UWLCV4GJHVNN", "expiration": "Apr 12, 2019 10:10:41 AM", "sessionToken": "FQoGZXIvYXdzEOD//////////wEaDMn/Y+DCJbd+qr5DgyLfAT5q7f74ObfChST3qC0HmvfWnRuSL9/RxIWAmNsYzsqQiob/s8a5ZQHcIMMfMDp7nrbETDThwQVb0/yAA64vCn0whDG/eVHzfdJ66AzeXRjUX7FcBTZ/2WO0pffruMWH1SfBPBerbkyRV7Hsupi2p3C28g0tla45j86d6+bg/FqIFBm4vb+qwJxViiFZEqfpBVGhKhWDsC6EztxY0nMbXOGQlsIVtHHml/S7uuSVdwNrN2PgJOLKhuH/xRUDCASgkRB+h6fuvW/FUdtHY7rrHhvr6kuIfF/Nqo/WXK3y5Uso4fa+5QU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b0c1f17-eb89-4827-924a-bdbace9ed9f3", "record_id": "flaws_cloudtrail:0000084:0b0c1f17-eb89-4827-924a-bdbace9ed9f3", "row_index": 84, "timestamp": "2019-04-11T22:10:41Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIA6DD9UWLCV4GJHVNN", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "251.206.230.5", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b0c1f17-eb89-4827-924a-bdbace9ed9f3", "eventTime": "2019-04-11T22:10:41Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.206.230.5", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIA6DD9UWLCV4GJHVNN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-04-11T22:10:41Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/04/11/[$LATEST]ee05772d4c74e63e4e55e8a83608628a", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b424d7b7-1d41-4850-a7c2-b29b4fb57a86", "record_id": "flaws_cloudtrail:0000085:b424d7b7-1d41-4850-a7c2-b29b4fb57a86", "row_index": 85, "timestamp": "2019-04-11T22:24:05Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIALVIVQG28NIWJKZCF", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "95.225.78.73", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 528, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b424d7b7-1d41-4850-a7c2-b29b4fb57a86", "eventTime": "2019-04-11T22:24:05Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "95.225.78.73", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIALVIVQG28NIWJKZCF", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac919243-8cc2-458f-bc21-fc58031a850b", "record_id": "flaws_cloudtrail:0000086:ac919243-8cc2-458f-bc21-fc58031a850b", "row_index": 86, "timestamp": "2019-04-11T22:25:31Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIALVIVQG28NIWJKZCF", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "95.225.78.73", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 532, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac919243-8cc2-458f-bc21-fc58031a850b", "eventTime": "2019-04-11T22:25:31Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "95.225.78.73", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIALVIVQG28NIWJKZCF", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07b18dd5-a0de-446c-97a0-a64a47faf300", "record_id": "flaws_cloudtrail:0000087:07b18dd5-a0de-446c-97a0-a64a47faf300", "row_index": 87, "timestamp": "2019-04-11T22:27:05Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.93.5.80", "user_agent": "Coral/Netty4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07b18dd5-a0de-446c-97a0-a64a47faf300", "eventTime": "2019-04-11T22:27:05Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.93.5.80", "userAgent": "Coral/Netty4", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA30KRXP73EL03OBLP", "expiration": "Apr 12, 2019 4:53:39 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07b18dd5-a0de-446c-97a0-a64a47faf300", "record_id": "flaws_cloudtrail:0000088:07b18dd5-a0de-446c-97a0-a64a47faf300", "row_index": 88, "timestamp": "2019-04-11T22:27:05Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.93.5.80", "user_agent": "Coral/Netty4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07b18dd5-a0de-446c-97a0-a64a47faf300", "eventTime": "2019-04-11T22:27:05Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.93.5.80", "userAgent": "Coral/Netty4", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA30KRXP73EL03OBLP", "expiration": "Apr 12, 2019 4:53:39 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e82b9d4-fb40-46be-a60e-bbebe8ace562", "record_id": "flaws_cloudtrail:0000089:8e82b9d4-fb40-46be-a60e-bbebe8ace562", "row_index": 89, "timestamp": "2019-04-11T22:29:23Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIALVIVQG28NIWJKZCF", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "95.225.78.73", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-3839"], "raw_record_size_bytes": 657, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e82b9d4-fb40-46be-a60e-bbebe8ace562", "eventTime": "2019-04-11T22:29:23Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "95.225.78.73", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIALVIVQG28NIWJKZCF", "userName": "Level6"}, "requestParameters": {"name": "trail-3839"}, "resources": [{"ARN": "arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-3839"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8303ec8b-53a0-415e-bc0a-ae75dad6b15b", "record_id": "flaws_cloudtrail:0000090:8303ec8b-53a0-415e-bc0a-ae75dad6b15b", "row_index": 90, "timestamp": "2019-04-11T22:30:11Z", "event_type": "StopLogging", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIALVIVQG28NIWJKZCF", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "95.225.78.73", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-3839"], "raw_record_size_bytes": 654, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8303ec8b-53a0-415e-bc0a-ae75dad6b15b", "eventTime": "2019-04-11T22:30:11Z", "eventName": "StopLogging", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "95.225.78.73", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIALVIVQG28NIWJKZCF", "userName": "Level6"}, "requestParameters": {"name": "trail-3839"}, "resources": [{"ARN": "arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-3839"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43d6ce44-0d5b-40c3-94ac-6f97bc9c8eab", "record_id": "flaws_cloudtrail:0000091:43d6ce44-0d5b-40c3-94ac-6f97bc9c8eab", "row_index": 91, "timestamp": "2019-04-11T22:32:10Z", "event_type": "UpdateTrail", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIALVIVQG28NIWJKZCF", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "95.225.78.73", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-3839"], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43d6ce44-0d5b-40c3-94ac-6f97bc9c8eab", "eventTime": "2019-04-11T22:32:10Z", "eventName": "UpdateTrail", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "95.225.78.73", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIALVIVQG28NIWJKZCF", "userName": "Level6"}, "requestParameters": {"name": "trail-3839", "isMultiRegionTrail": false, "enableLogFileValidation": false}, "resources": [{"ARN": "arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-3839"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a663969-8b7f-48cb-8d95-32c19f3cfc39", "record_id": "flaws_cloudtrail:0000092:1a663969-8b7f-48cb-8d95-32c19f3cfc39", "row_index": 92, "timestamp": "2019-04-11T23:27:05Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.93.5.80", "user_agent": "Coral/Netty4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a663969-8b7f-48cb-8d95-32c19f3cfc39", "eventTime": "2019-04-11T23:27:05Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.93.5.80", "userAgent": "Coral/Netty4", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAAN0645YFVRBL5U6B", "expiration": "Apr 12, 2019 5:59:34 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a663969-8b7f-48cb-8d95-32c19f3cfc39", "record_id": "flaws_cloudtrail:0000093:1a663969-8b7f-48cb-8d95-32c19f3cfc39", "row_index": 93, "timestamp": "2019-04-11T23:27:05Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.93.5.80", "user_agent": "Coral/Netty4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a663969-8b7f-48cb-8d95-32c19f3cfc39", "eventTime": "2019-04-11T23:27:05Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.93.5.80", "userAgent": "Coral/Netty4", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAAN0645YFVRBL5U6B", "expiration": "Apr 12, 2019 5:59:34 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e0bb051-7df4-494b-8f42-72336b8f628", "record_id": "flaws_cloudtrail:0000094:0e0bb051-7df4-494b-8f42-72336b8f628", "row_index": 94, "timestamp": "2019-04-12T00:20:50Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "102.223.177.172", "user_agent": "aws-internal/3 aws-sdk-java/1.11.526 Linux/4.9.137-0.1.ac.218.74.329.metal1.x86_64 OpenJDK_64-Bit_Server_VM/25.202-b08 java/1.8.0_202 vendor/Oracle_Corporation", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 2069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e0bb051-7df4-494b-8f42-72336b8f628", "eventTime": "2019-04-12T00:20:50Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "102.223.177.172", "userAgent": "aws-internal/3 aws-sdk-java/1.11.526 Linux/4.9.137-0.1.ac.218.74.329.metal1.x86_64 OpenJDK_64-Bit_Server_VM/25.202-b08 java/1.8.0_202 vendor/Oracle_Corporation", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIA69GRD5PAVAVDZ5YL", "expiration": "Apr 12, 2019 1:20:50 AM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e0bb051-7df4-494b-8f42-72336b8f628", "record_id": "flaws_cloudtrail:0000095:0e0bb051-7df4-494b-8f42-72336b8f628", "row_index": 95, "timestamp": "2019-04-12T00:20:50Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "102.223.177.172", "user_agent": "aws-internal/3 aws-sdk-java/1.11.526 Linux/4.9.137-0.1.ac.218.74.329.metal1.x86_64 OpenJDK_64-Bit_Server_VM/25.202-b08 java/1.8.0_202 vendor/Oracle_Corporation", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 2069, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e0bb051-7df4-494b-8f42-72336b8f628", "eventTime": "2019-04-12T00:20:50Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "102.223.177.172", "userAgent": "aws-internal/3 aws-sdk-java/1.11.526 Linux/4.9.137-0.1.ac.218.74.329.metal1.x86_64 OpenJDK_64-Bit_Server_VM/25.202-b08 java/1.8.0_202 vendor/Oracle_Corporation", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIA69GRD5PAVAVDZ5YL", "expiration": "Apr 12, 2019 1:20:50 AM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3bbb4a97-e133-41d4-867a-70cf704a2551", "record_id": "flaws_cloudtrail:0000096:3bbb4a97-e133-41d4-867a-70cf704a2551", "row_index": 96, "timestamp": "2019-04-12T00:27:05Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.93.5.80", "user_agent": "Coral/Netty4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1884, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3bbb4a97-e133-41d4-867a-70cf704a2551", "eventTime": "2019-04-12T00:27:05Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.93.5.80", "userAgent": "Coral/Netty4", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIASPIWRIS2VTFQ9QTF", "expiration": "Apr 12, 2019 6:55:45 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3bbb4a97-e133-41d4-867a-70cf704a2551", "record_id": "flaws_cloudtrail:0000097:3bbb4a97-e133-41d4-867a-70cf704a2551", "row_index": 97, "timestamp": "2019-04-12T00:27:05Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.93.5.80", "user_agent": "Coral/Netty4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1884, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3bbb4a97-e133-41d4-867a-70cf704a2551", "eventTime": "2019-04-12T00:27:05Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.93.5.80", "userAgent": "Coral/Netty4", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIASPIWRIS2VTFQ9QTF", "expiration": "Apr 12, 2019 6:55:45 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4a615aa-ad2e-4d5c-a6d0-cc671a53d343", "record_id": "flaws_cloudtrail:0000098:e4a615aa-ad2e-4d5c-a6d0-cc671a53d343", "row_index": 98, "timestamp": "2019-04-12T01:27:05Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.93.5.80", "user_agent": "Coral/Netty4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4a615aa-ad2e-4d5c-a6d0-cc671a53d343", "eventTime": "2019-04-12T01:27:05Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.93.5.80", "userAgent": "Coral/Netty4", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIABGG0T4VPSLNZ0G5S", "expiration": "Apr 12, 2019 7:56:29 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4a615aa-ad2e-4d5c-a6d0-cc671a53d343", "record_id": "flaws_cloudtrail:0000099:e4a615aa-ad2e-4d5c-a6d0-cc671a53d343", "row_index": 99, "timestamp": "2019-04-12T01:27:05Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.93.5.80", "user_agent": "Coral/Netty4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4a615aa-ad2e-4d5c-a6d0-cc671a53d343", "eventTime": "2019-04-12T01:27:05Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.93.5.80", "userAgent": "Coral/Netty4", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIABGG0T4VPSLNZ0G5S", "expiration": "Apr 12, 2019 7:56:29 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd3c5c5e-a744-438f-8e62-250f515abc09", "record_id": "flaws_cloudtrail:0000100:dd3c5c5e-a744-438f-8e62-250f515abc09", "row_index": 100, "timestamp": "2019-04-12T02:27:05Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.93.5.80", "user_agent": "Coral/Netty4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd3c5c5e-a744-438f-8e62-250f515abc09", "eventTime": "2019-04-12T02:27:05Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.93.5.80", "userAgent": "Coral/Netty4", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA3HFCLBQ2ALWQ9Z0W", "expiration": "Apr 12, 2019 8:57:32 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd3c5c5e-a744-438f-8e62-250f515abc09", "record_id": "flaws_cloudtrail:0000101:dd3c5c5e-a744-438f-8e62-250f515abc09", "row_index": 101, "timestamp": "2019-04-12T02:27:05Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.93.5.80", "user_agent": "Coral/Netty4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd3c5c5e-a744-438f-8e62-250f515abc09", "eventTime": "2019-04-12T02:27:05Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.93.5.80", "userAgent": "Coral/Netty4", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA3HFCLBQ2ALWQ9Z0W", "expiration": "Apr 12, 2019 8:57:32 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5e6944a-1922-4564-8fb3-4ff6c8c538553", "record_id": "flaws_cloudtrail:0000102:e5e6944a-1922-4564-8fb3-4ff6c8c538553", "row_index": 102, "timestamp": "2019-04-12T03:27:05Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.93.5.80", "user_agent": "Coral/Netty4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5e6944a-1922-4564-8fb3-4ff6c8c538553", "eventTime": "2019-04-12T03:27:05Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.93.5.80", "userAgent": "Coral/Netty4", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAIVNVMZDQN6FPTMZ0", "expiration": "Apr 12, 2019 9:44:10 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5e6944a-1922-4564-8fb3-4ff6c8c538553", "record_id": "flaws_cloudtrail:0000103:e5e6944a-1922-4564-8fb3-4ff6c8c538553", "row_index": 103, "timestamp": "2019-04-12T03:27:05Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "220.93.5.80", "user_agent": "Coral/Netty4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5e6944a-1922-4564-8fb3-4ff6c8c538553", "eventTime": "2019-04-12T03:27:05Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "220.93.5.80", "userAgent": "Coral/Netty4", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAIVNVMZDQN6FPTMZ0", "expiration": "Apr 12, 2019 9:44:10 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "384649-1ffc-47ec-8202-5917cd6563a0", "record_id": "flaws_cloudtrail:0000104:384649-1ffc-47ec-8202-5917cd6563a0", "row_index": 104, "timestamp": "2019-04-12T03:43:46Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAKAKGKTV2RI6ZBMX3", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "249.255.92.244", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1029, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "384649-1ffc-47ec-8202-5917cd6563a0", "eventTime": "2019-04-12T03:43:46Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "249.255.92.244", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAKAKGKTV2RI6ZBMX3", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-04-12T03:43:46Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/04/12/[$LATEST]a4bc12e290596d3e15da9b880aadc9d0", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf8f573b-3614-4228-9fc1-093af6cc5d54", "record_id": "flaws_cloudtrail:0000105:cf8f573b-3614-4228-9fc1-093af6cc5d54", "row_index": 105, "timestamp": "2019-04-12T03:43:46Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.250.221.253", "user_agent": "Coral/Netty4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1218, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf8f573b-3614-4228-9fc1-093af6cc5d54", "eventTime": "2019-04-12T03:43:46Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.250.221.253", "userAgent": "Coral/Netty4", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIARPUGODJN2QUVZ3LK", "expiration": "Apr 12, 2019 3:43:46 PM", "sessionToken": "FQoGZXIvYXdzEOX//////////wEaDCNFbKHUe9PXHJ158SLfAd1yrHRysn+T9cv/+lVD7HB9D2cKlUhc4AuL2VU3/gDkjfiDhsjfTOElFxC74twPw+Qwc9mqcm4+JqSe9hGgRL7t51Ws7HlLYd+ZaOk1MRBlprrv9u8JVETlwblrfYvTpxBfQJueNWj6FKUSQfZURdxN04g4GHQFpcGWVTV6Ok3ALFcHg6YeC86yh1KoHKewf0IKdcQGbjIMfXVLfW+vBdpZVrmvPfOLQ0YWnL8Vntx1ez9SlfSMtFqU/590u8TmHX2Z90RuHjT3adFsOGb0Gh4JoUS0s5as+knTVaAlXCMo8pLA5QU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "162939-1121-49b1-9d31-5e9d62a020233", "record_id": "flaws_cloudtrail:0000106:162939-1121-49b1-9d31-5e9d62a020233", "row_index": 106, "timestamp": "2019-04-12T03:43:46Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.8.172.8", "user_agent": "Coral/Netty4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1212, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "162939-1121-49b1-9d31-5e9d62a020233", "eventTime": "2019-04-12T03:43:46Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.8.172.8", "userAgent": "Coral/Netty4", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAKAKGKTV2RI6ZBMX3", "expiration": "Apr 12, 2019 3:43:46 PM", "sessionToken": "FQoGZXIvYXdzEOX//////////wEaDMLGmHwno2YYMT9vFCLfAbyTKahNWW76EGTYSynbLh4Y7W8peo4iNlUtHb4OvsrDjuQtDJvT8qJGQD9znvKCtCH4EFkuvRtm5P1up2B7WA9xnDzC3vlq0QheIvaGAs8zxWP9c/V+h1vykKTlum7NiRXOLx1wltb8obM+t0UAko/0qLyRossNxtf+RygRiA7A3teEHK9gn0kruAbxkrWDH3hYCv7N76UA8Zzkpe/8Tx4J1qVprK5n1CZSJDopA2/1edpL3jluL7JjHfSGq419BirTrwEdLlB1mfBCzObVgLKHMifMjiar2BKaLkWPVVAo8pLA5QU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "384649-1ffc-47ec-8202-5917cd6563a0", "record_id": "flaws_cloudtrail:0000107:384649-1ffc-47ec-8202-5917cd6563a0", "row_index": 107, "timestamp": "2019-04-12T03:43:46Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAKAKGKTV2RI6ZBMX3", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "249.255.92.244", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1029, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "384649-1ffc-47ec-8202-5917cd6563a0", "eventTime": "2019-04-12T03:43:46Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "249.255.92.244", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAKAKGKTV2RI6ZBMX3", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-04-12T03:43:46Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2019/04/12/[$LATEST]a4bc12e290596d3e15da9b880aadc9d0", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf8f573b-3614-4228-9fc1-093af6cc5d54", "record_id": "flaws_cloudtrail:0000108:cf8f573b-3614-4228-9fc1-093af6cc5d54", "row_index": 108, "timestamp": "2019-04-12T03:43:46Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.250.221.253", "user_agent": "Coral/Netty4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1218, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf8f573b-3614-4228-9fc1-093af6cc5d54", "eventTime": "2019-04-12T03:43:46Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.250.221.253", "userAgent": "Coral/Netty4", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIARPUGODJN2QUVZ3LK", "expiration": "Apr 12, 2019 3:43:46 PM", "sessionToken": "FQoGZXIvYXdzEOX//////////wEaDCNFbKHUe9PXHJ158SLfAd1yrHRysn+T9cv/+lVD7HB9D2cKlUhc4AuL2VU3/gDkjfiDhsjfTOElFxC74twPw+Qwc9mqcm4+JqSe9hGgRL7t51Ws7HlLYd+ZaOk1MRBlprrv9u8JVETlwblrfYvTpxBfQJueNWj6FKUSQfZURdxN04g4GHQFpcGWVTV6Ok3ALFcHg6YeC86yh1KoHKewf0IKdcQGbjIMfXVLfW+vBdpZVrmvPfOLQ0YWnL8Vntx1ez9SlfSMtFqU/590u8TmHX2Z90RuHjT3adFsOGb0Gh4JoUS0s5as+knTVaAlXCMo8pLA5QU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "162939-1121-49b1-9d31-5e9d62a020233", "record_id": "flaws_cloudtrail:0000109:162939-1121-49b1-9d31-5e9d62a020233", "row_index": 109, "timestamp": "2019-04-12T03:43:46Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.8.172.8", "user_agent": "Coral/Netty4", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1212, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "162939-1121-49b1-9d31-5e9d62a020233", "eventTime": "2019-04-12T03:43:46Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.8.172.8", "userAgent": "Coral/Netty4", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAKAKGKTV2RI6ZBMX3", "expiration": "Apr 12, 2019 3:43:46 PM", "sessionToken": "FQoGZXIvYXdzEOX//////////wEaDMLGmHwno2YYMT9vFCLfAbyTKahNWW76EGTYSynbLh4Y7W8peo4iNlUtHb4OvsrDjuQtDJvT8qJGQD9znvKCtCH4EFkuvRtm5P1up2B7WA9xnDzC3vlq0QheIvaGAs8zxWP9c/V+h1vykKTlum7NiRXOLx1wltb8obM+t0UAko/0qLyRossNxtf+RygRiA7A3teEHK9gn0kruAbxkrWDH3hYCv7N76UA8Zzkpe/8Tx4J1qVprK5n1CZSJDopA2/1edpL3jluL7JjHfSGq419BirTrwEdLlB1mfBCzObVgLKHMifMjiar2BKaLkWPVVAo8pLA5QU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "289af445-6671-4843-91bf-f22b734e8ac6", "record_id": "flaws_cloudtrail:0000110:289af445-6671-4843-91bf-f22b734e8ac6", "row_index": 110, "timestamp": "2019-04-12T03:53:49Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "289af445-6671-4843-91bf-f22b734e8ac6", "eventTime": "2019-04-12T03:53:49Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "289af445-6671-4843-91bf-f22b734e8ac6", "record_id": "flaws_cloudtrail:0000111:289af445-6671-4843-91bf-f22b734e8ac6", "row_index": 111, "timestamp": "2019-04-12T03:53:49Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "289af445-6671-4843-91bf-f22b734e8ac6", "eventTime": "2019-04-12T03:53:49Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06608ac3-1ded-4967-a4cf-ed4720a38b36", "record_id": "flaws_cloudtrail:0000112:06608ac3-1ded-4967-a4cf-ed4720a38b36", "row_index": 112, "timestamp": "2019-04-12T03:53:51Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 848, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06608ac3-1ded-4967-a4cf-ed4720a38b36", "eventTime": "2019-04-12T03:53:51Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06608ac3-1ded-4967-a4cf-ed4720a38b36", "record_id": "flaws_cloudtrail:0000113:06608ac3-1ded-4967-a4cf-ed4720a38b36", "row_index": 113, "timestamp": "2019-04-12T03:53:51Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 848, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06608ac3-1ded-4967-a4cf-ed4720a38b36", "eventTime": "2019-04-12T03:53:51Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d21fbf02-4ef5-4e8e-bfa2-0fc2ba96f7bf", "record_id": "flaws_cloudtrail:0000114:d21fbf02-4ef5-4e8e-bfa2-0fc2ba96f7bf", "row_index": 114, "timestamp": "2019-04-12T03:53:52Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d21fbf02-4ef5-4e8e-bfa2-0fc2ba96f7bf", "eventTime": "2019-04-12T03:53:52Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListGroups on resource: arn:aws:iam::811596193553:group/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6941de55-1951-4c76-be02-1ae2a8c2664d", "record_id": "flaws_cloudtrail:0000115:6941de55-1951-4c76-be02-1ae2a8c2664d", "row_index": 115, "timestamp": "2019-04-12T03:53:52Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 846, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6941de55-1951-4c76-be02-1ae2a8c2664d", "eventTime": "2019-04-12T03:53:52Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListRoles on resource: arn:aws:iam::811596193553:role/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb8146b1-ae60-4701-9bec-1cd2fd15f286", "record_id": "flaws_cloudtrail:0000116:cb8146b1-ae60-4701-9bec-1cd2fd15f286", "row_index": 116, "timestamp": "2019-04-12T03:53:52Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb8146b1-ae60-4701-9bec-1cd2fd15f286", "eventTime": "2019-04-12T03:53:52Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListPolicies on resource: policy path /", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37d3b637-7260-40c1-8243-c430d5cfcbcd", "record_id": "flaws_cloudtrail:0000117:37d3b637-7260-40c1-8243-c430d5cfcbcd", "row_index": 117, "timestamp": "2019-04-12T03:53:52Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 848, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37d3b637-7260-40c1-8243-c430d5cfcbcd", "eventTime": "2019-04-12T03:53:52Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListUsers on resource: arn:aws:iam::811596193553:user/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d21fbf02-4ef5-4e8e-bfa2-0fc2ba96f7bf", "record_id": "flaws_cloudtrail:0000118:d21fbf02-4ef5-4e8e-bfa2-0fc2ba96f7bf", "row_index": 118, "timestamp": "2019-04-12T03:53:52Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d21fbf02-4ef5-4e8e-bfa2-0fc2ba96f7bf", "eventTime": "2019-04-12T03:53:52Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListGroups on resource: arn:aws:iam::811596193553:group/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6941de55-1951-4c76-be02-1ae2a8c2664d", "record_id": "flaws_cloudtrail:0000119:6941de55-1951-4c76-be02-1ae2a8c2664d", "row_index": 119, "timestamp": "2019-04-12T03:53:52Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 846, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6941de55-1951-4c76-be02-1ae2a8c2664d", "eventTime": "2019-04-12T03:53:52Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListRoles on resource: arn:aws:iam::811596193553:role/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb8146b1-ae60-4701-9bec-1cd2fd15f286", "record_id": "flaws_cloudtrail:0000120:cb8146b1-ae60-4701-9bec-1cd2fd15f286", "row_index": 120, "timestamp": "2019-04-12T03:53:52Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb8146b1-ae60-4701-9bec-1cd2fd15f286", "eventTime": "2019-04-12T03:53:52Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListPolicies on resource: policy path /", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37d3b637-7260-40c1-8243-c430d5cfcbcd", "record_id": "flaws_cloudtrail:0000121:37d3b637-7260-40c1-8243-c430d5cfcbcd", "row_index": 121, "timestamp": "2019-04-12T03:53:52Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 848, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37d3b637-7260-40c1-8243-c430d5cfcbcd", "eventTime": "2019-04-12T03:53:52Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListUsers on resource: arn:aws:iam::811596193553:user/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2bea9b49-42f5-412f-b907-87ee060902", "record_id": "flaws_cloudtrail:0000122:2bea9b49-42f5-412f-b907-87ee060902", "row_index": 122, "timestamp": "2019-04-12T03:53:53Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 846, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2bea9b49-42f5-412f-b907-87ee060902", "eventTime": "2019-04-12T03:53:53Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetAccountPasswordPolicy on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2bea9b49-42f5-412f-b907-87ee060902", "record_id": "flaws_cloudtrail:0000123:2bea9b49-42f5-412f-b907-87ee060902", "row_index": 123, "timestamp": "2019-04-12T03:53:53Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 846, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2bea9b49-42f5-412f-b907-87ee060902", "eventTime": "2019-04-12T03:53:53Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetAccountPasswordPolicy on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e157d543-e7e5-48ce-a03d-aa738d22477c", "record_id": "flaws_cloudtrail:0000124:e157d543-e7e5-48ce-a03d-aa738d22477c", "row_index": 124, "timestamp": "2019-04-12T03:53:56Z", "event_type": "ListIdentities", "event_source": "ses.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e157d543-e7e5-48ce-a03d-aa738d22477c", "eventTime": "2019-04-12T03:53:56Z", "eventName": "ListIdentities", "eventSource": "ses.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: ses:ListIdentities", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e157d543-e7e5-48ce-a03d-aa738d22477c", "record_id": "flaws_cloudtrail:0000125:e157d543-e7e5-48ce-a03d-aa738d22477c", "row_index": 125, "timestamp": "2019-04-12T03:53:56Z", "event_type": "ListIdentities", "event_source": "ses.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e157d543-e7e5-48ce-a03d-aa738d22477c", "eventTime": "2019-04-12T03:53:56Z", "eventName": "ListIdentities", "eventSource": "ses.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: ses:ListIdentities", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "391242-2bcc-4b45-beb8-967079c9fe7", "record_id": "flaws_cloudtrail:0000126:391242-2bcc-4b45-beb8-967079c9fe7", "row_index": 126, "timestamp": "2019-04-12T03:53:57Z", "event_type": "ListIdentities", "event_source": "ses.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "391242-2bcc-4b45-beb8-967079c9fe7", "eventTime": "2019-04-12T03:53:57Z", "eventName": "ListIdentities", "eventSource": "ses.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: ses:ListIdentities", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c33d13b-2dba-4887-878a-ff9a895bfd34", "record_id": "flaws_cloudtrail:0000127:4c33d13b-2dba-4887-878a-ff9a895bfd34", "row_index": 127, "timestamp": "2019-04-12T03:53:57Z", "event_type": "ListIdentities", "event_source": "ses.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c33d13b-2dba-4887-878a-ff9a895bfd34", "eventTime": "2019-04-12T03:53:57Z", "eventName": "ListIdentities", "eventSource": "ses.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: ses:ListIdentities", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "391242-2bcc-4b45-beb8-967079c9fe7", "record_id": "flaws_cloudtrail:0000128:391242-2bcc-4b45-beb8-967079c9fe7", "row_index": 128, "timestamp": "2019-04-12T03:53:57Z", "event_type": "ListIdentities", "event_source": "ses.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "391242-2bcc-4b45-beb8-967079c9fe7", "eventTime": "2019-04-12T03:53:57Z", "eventName": "ListIdentities", "eventSource": "ses.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: ses:ListIdentities", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c33d13b-2dba-4887-878a-ff9a895bfd34", "record_id": "flaws_cloudtrail:0000129:4c33d13b-2dba-4887-878a-ff9a895bfd34", "row_index": 129, "timestamp": "2019-04-12T03:53:57Z", "event_type": "ListIdentities", "event_source": "ses.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c33d13b-2dba-4887-878a-ff9a895bfd34", "eventTime": "2019-04-12T03:53:57Z", "eventName": "ListIdentities", "eventSource": "ses.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: ses:ListIdentities", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "315370be-d380-4291-877b-ada0f5a4190b", "record_id": "flaws_cloudtrail:0000130:315370be-d380-4291-877b-ada0f5a4190b", "row_index": 130, "timestamp": "2019-04-12T03:54:01Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 840, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "315370be-d380-4291-877b-ada0f5a4190b", "eventTime": "2019-04-12T03:54:01Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39f951bb-9bdb-4e23-9055-10241a735091", "record_id": "flaws_cloudtrail:0000131:39f951bb-9bdb-4e23-9055-10241a735091", "row_index": 131, "timestamp": "2019-04-12T03:54:01Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39f951bb-9bdb-4e23-9055-10241a735091", "eventTime": "2019-04-12T03:54:01Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8fc81832-5203-483b-8ad5-660d3e4ccc3e", "record_id": "flaws_cloudtrail:0000132:8fc81832-5203-483b-8ad5-660d3e4ccc3e", "row_index": 132, "timestamp": "2019-04-12T03:54:01Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8fc81832-5203-483b-8ad5-660d3e4ccc3e", "eventTime": "2019-04-12T03:54:01Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "315370be-d380-4291-877b-ada0f5a4190b", "record_id": "flaws_cloudtrail:0000133:315370be-d380-4291-877b-ada0f5a4190b", "row_index": 133, "timestamp": "2019-04-12T03:54:01Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 840, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "315370be-d380-4291-877b-ada0f5a4190b", "eventTime": "2019-04-12T03:54:01Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39f951bb-9bdb-4e23-9055-10241a735091", "record_id": "flaws_cloudtrail:0000134:39f951bb-9bdb-4e23-9055-10241a735091", "row_index": 134, "timestamp": "2019-04-12T03:54:01Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39f951bb-9bdb-4e23-9055-10241a735091", "eventTime": "2019-04-12T03:54:01Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8fc81832-5203-483b-8ad5-660d3e4ccc3e", "record_id": "flaws_cloudtrail:0000135:8fc81832-5203-483b-8ad5-660d3e4ccc3e", "row_index": 135, "timestamp": "2019-04-12T03:54:01Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8fc81832-5203-483b-8ad5-660d3e4ccc3e", "eventTime": "2019-04-12T03:54:01Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97c75ee4-6ad3-46f4-9fdd-873a3827f6c2", "record_id": "flaws_cloudtrail:0000136:97c75ee4-6ad3-46f4-9fdd-873a3827f6c2", "row_index": 136, "timestamp": "2019-04-12T03:54:02Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97c75ee4-6ad3-46f4-9fdd-873a3827f6c2", "eventTime": "2019-04-12T03:54:02Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "075ad81b-13de-4640-bdf0-e9af215563dc", "record_id": "flaws_cloudtrail:0000137:075ad81b-13de-4640-bdf0-e9af215563dc", "row_index": 137, "timestamp": "2019-04-12T03:54:02Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 840, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "075ad81b-13de-4640-bdf0-e9af215563dc", "eventTime": "2019-04-12T03:54:02Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "966173e65-66e2-4e65-af31-11efe7db3ed3", "record_id": "flaws_cloudtrail:0000138:966173e65-66e2-4e65-af31-11efe7db3ed3", "row_index": 138, "timestamp": "2019-04-12T03:54:02Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "966173e65-66e2-4e65-af31-11efe7db3ed3", "eventTime": "2019-04-12T03:54:02Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc955740-1dce-45fc-9875-911921dabbea", "record_id": "flaws_cloudtrail:0000139:dc955740-1dce-45fc-9875-911921dabbea", "row_index": 139, "timestamp": "2019-04-12T03:54:02Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc955740-1dce-45fc-9875-911921dabbea", "eventTime": "2019-04-12T03:54:02Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84a416819-d635-4c16-b5a0-d94fb223b4b2", "record_id": "flaws_cloudtrail:0000140:84a416819-d635-4c16-b5a0-d94fb223b4b2", "row_index": 140, "timestamp": "2019-04-12T03:54:02Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84a416819-d635-4c16-b5a0-d94fb223b4b2", "eventTime": "2019-04-12T03:54:02Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41f6a052-dcd0-40b9-b92a-e97c8d1ae558", "record_id": "flaws_cloudtrail:0000141:41f6a052-dcd0-40b9-b92a-e97c8d1ae558", "row_index": 141, "timestamp": "2019-04-12T03:54:02Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41f6a052-dcd0-40b9-b92a-e97c8d1ae558", "eventTime": "2019-04-12T03:54:02Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "813b4948-2d06-4f62-bb84-3c0eb5e4e962", "record_id": "flaws_cloudtrail:0000142:813b4948-2d06-4f62-bb84-3c0eb5e4e962", "row_index": 142, "timestamp": "2019-04-12T03:54:02Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "813b4948-2d06-4f62-bb84-3c0eb5e4e962", "eventTime": "2019-04-12T03:54:02Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "011e7b13-9cac-4893-8902-13435a1", "record_id": "flaws_cloudtrail:0000143:011e7b13-9cac-4893-8902-13435a1", "row_index": 143, "timestamp": "2019-04-12T03:54:02Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "011e7b13-9cac-4893-8902-13435a1", "eventTime": "2019-04-12T03:54:02Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f82508-c393-40d5-ae2f-a0e9b95e99d8", "record_id": "flaws_cloudtrail:0000144:2f82508-c393-40d5-ae2f-a0e9b95e99d8", "row_index": 144, "timestamp": "2019-04-12T03:54:02Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f82508-c393-40d5-ae2f-a0e9b95e99d8", "eventTime": "2019-04-12T03:54:02Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "157913f-e704-4ae4-9248-ccae63133e", "record_id": "flaws_cloudtrail:0000145:157913f-e704-4ae4-9248-ccae63133e", "row_index": 145, "timestamp": "2019-04-12T03:54:02Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "157913f-e704-4ae4-9248-ccae63133e", "eventTime": "2019-04-12T03:54:02Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72c8c72d-6a89-4892-9687-e312430eaf0", "record_id": "flaws_cloudtrail:0000146:72c8c72d-6a89-4892-9687-e312430eaf0", "row_index": 146, "timestamp": "2019-04-12T03:54:02Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72c8c72d-6a89-4892-9687-e312430eaf0", "eventTime": "2019-04-12T03:54:02Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdb5439b-3d11-444c-bb4d-801777e738cb", "record_id": "flaws_cloudtrail:0000147:fdb5439b-3d11-444c-bb4d-801777e738cb", "row_index": 147, "timestamp": "2019-04-12T03:54:02Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdb5439b-3d11-444c-bb4d-801777e738cb", "eventTime": "2019-04-12T03:54:02Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e7c1c53-fb0f-471c-ad5b-7327f5f3425a", "record_id": "flaws_cloudtrail:0000148:7e7c1c53-fb0f-471c-ad5b-7327f5f3425a", "row_index": 148, "timestamp": "2019-04-12T03:54:02Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e7c1c53-fb0f-471c-ad5b-7327f5f3425a", "eventTime": "2019-04-12T03:54:02Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37cab68d-d77e-4019-bf0f-974a329eeb12", "record_id": "flaws_cloudtrail:0000149:37cab68d-d77e-4019-bf0f-974a329eeb12", "row_index": 149, "timestamp": "2019-04-12T03:54:02Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37cab68d-d77e-4019-bf0f-974a329eeb12", "eventTime": "2019-04-12T03:54:02Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "401009-36d5-498a-bb6d-cdbaa4a71d79", "record_id": "flaws_cloudtrail:0000150:401009-36d5-498a-bb6d-cdbaa4a71d79", "row_index": 150, "timestamp": "2019-04-12T03:54:02Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "401009-36d5-498a-bb6d-cdbaa4a71d79", "eventTime": "2019-04-12T03:54:02Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e62f81ac-d275-4578-b1e3-34efb40dc224", "record_id": "flaws_cloudtrail:0000151:e62f81ac-d275-4578-b1e3-34efb40dc224", "row_index": 151, "timestamp": "2019-04-12T03:54:02Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 836, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e62f81ac-d275-4578-b1e3-34efb40dc224", "eventTime": "2019-04-12T03:54:02Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "131a9fd2-a301-4a8c-9860-295b44f616fb", "record_id": "flaws_cloudtrail:0000152:131a9fd2-a301-4a8c-9860-295b44f616fb", "row_index": 152, "timestamp": "2019-04-12T03:54:02Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "131a9fd2-a301-4a8c-9860-295b44f616fb", "eventTime": "2019-04-12T03:54:02Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a21698e-9d0d-4d2b-8120-eb5b92459c8c", "record_id": "flaws_cloudtrail:0000153:7a21698e-9d0d-4d2b-8120-eb5b92459c8c", "row_index": 153, "timestamp": "2019-04-12T03:54:02Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 833, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a21698e-9d0d-4d2b-8120-eb5b92459c8c", "eventTime": "2019-04-12T03:54:02Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97c75ee4-6ad3-46f4-9fdd-873a3827f6c2", "record_id": "flaws_cloudtrail:0000154:97c75ee4-6ad3-46f4-9fdd-873a3827f6c2", "row_index": 154, "timestamp": "2019-04-12T03:54:02Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97c75ee4-6ad3-46f4-9fdd-873a3827f6c2", "eventTime": "2019-04-12T03:54:02Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "075ad81b-13de-4640-bdf0-e9af215563dc", "record_id": "flaws_cloudtrail:0000155:075ad81b-13de-4640-bdf0-e9af215563dc", "row_index": 155, "timestamp": "2019-04-12T03:54:02Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 840, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "075ad81b-13de-4640-bdf0-e9af215563dc", "eventTime": "2019-04-12T03:54:02Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "966173e65-66e2-4e65-af31-11efe7db3ed3", "record_id": "flaws_cloudtrail:0000156:966173e65-66e2-4e65-af31-11efe7db3ed3", "row_index": 156, "timestamp": "2019-04-12T03:54:02Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "966173e65-66e2-4e65-af31-11efe7db3ed3", "eventTime": "2019-04-12T03:54:02Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc955740-1dce-45fc-9875-911921dabbea", "record_id": "flaws_cloudtrail:0000157:dc955740-1dce-45fc-9875-911921dabbea", "row_index": 157, "timestamp": "2019-04-12T03:54:02Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc955740-1dce-45fc-9875-911921dabbea", "eventTime": "2019-04-12T03:54:02Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84a416819-d635-4c16-b5a0-d94fb223b4b2", "record_id": "flaws_cloudtrail:0000158:84a416819-d635-4c16-b5a0-d94fb223b4b2", "row_index": 158, "timestamp": "2019-04-12T03:54:02Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84a416819-d635-4c16-b5a0-d94fb223b4b2", "eventTime": "2019-04-12T03:54:02Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41f6a052-dcd0-40b9-b92a-e97c8d1ae558", "record_id": "flaws_cloudtrail:0000159:41f6a052-dcd0-40b9-b92a-e97c8d1ae558", "row_index": 159, "timestamp": "2019-04-12T03:54:02Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41f6a052-dcd0-40b9-b92a-e97c8d1ae558", "eventTime": "2019-04-12T03:54:02Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "813b4948-2d06-4f62-bb84-3c0eb5e4e962", "record_id": "flaws_cloudtrail:0000160:813b4948-2d06-4f62-bb84-3c0eb5e4e962", "row_index": 160, "timestamp": "2019-04-12T03:54:02Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "813b4948-2d06-4f62-bb84-3c0eb5e4e962", "eventTime": "2019-04-12T03:54:02Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "011e7b13-9cac-4893-8902-13435a1", "record_id": "flaws_cloudtrail:0000161:011e7b13-9cac-4893-8902-13435a1", "row_index": 161, "timestamp": "2019-04-12T03:54:02Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "011e7b13-9cac-4893-8902-13435a1", "eventTime": "2019-04-12T03:54:02Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f82508-c393-40d5-ae2f-a0e9b95e99d8", "record_id": "flaws_cloudtrail:0000162:2f82508-c393-40d5-ae2f-a0e9b95e99d8", "row_index": 162, "timestamp": "2019-04-12T03:54:02Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f82508-c393-40d5-ae2f-a0e9b95e99d8", "eventTime": "2019-04-12T03:54:02Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "157913f-e704-4ae4-9248-ccae63133e", "record_id": "flaws_cloudtrail:0000163:157913f-e704-4ae4-9248-ccae63133e", "row_index": 163, "timestamp": "2019-04-12T03:54:02Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "157913f-e704-4ae4-9248-ccae63133e", "eventTime": "2019-04-12T03:54:02Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72c8c72d-6a89-4892-9687-e312430eaf0", "record_id": "flaws_cloudtrail:0000164:72c8c72d-6a89-4892-9687-e312430eaf0", "row_index": 164, "timestamp": "2019-04-12T03:54:02Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72c8c72d-6a89-4892-9687-e312430eaf0", "eventTime": "2019-04-12T03:54:02Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdb5439b-3d11-444c-bb4d-801777e738cb", "record_id": "flaws_cloudtrail:0000165:fdb5439b-3d11-444c-bb4d-801777e738cb", "row_index": 165, "timestamp": "2019-04-12T03:54:02Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdb5439b-3d11-444c-bb4d-801777e738cb", "eventTime": "2019-04-12T03:54:02Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e7c1c53-fb0f-471c-ad5b-7327f5f3425a", "record_id": "flaws_cloudtrail:0000166:7e7c1c53-fb0f-471c-ad5b-7327f5f3425a", "row_index": 166, "timestamp": "2019-04-12T03:54:02Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e7c1c53-fb0f-471c-ad5b-7327f5f3425a", "eventTime": "2019-04-12T03:54:02Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37cab68d-d77e-4019-bf0f-974a329eeb12", "record_id": "flaws_cloudtrail:0000167:37cab68d-d77e-4019-bf0f-974a329eeb12", "row_index": 167, "timestamp": "2019-04-12T03:54:02Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37cab68d-d77e-4019-bf0f-974a329eeb12", "eventTime": "2019-04-12T03:54:02Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "401009-36d5-498a-bb6d-cdbaa4a71d79", "record_id": "flaws_cloudtrail:0000168:401009-36d5-498a-bb6d-cdbaa4a71d79", "row_index": 168, "timestamp": "2019-04-12T03:54:02Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "401009-36d5-498a-bb6d-cdbaa4a71d79", "eventTime": "2019-04-12T03:54:02Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e62f81ac-d275-4578-b1e3-34efb40dc224", "record_id": "flaws_cloudtrail:0000169:e62f81ac-d275-4578-b1e3-34efb40dc224", "row_index": 169, "timestamp": "2019-04-12T03:54:02Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 836, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e62f81ac-d275-4578-b1e3-34efb40dc224", "eventTime": "2019-04-12T03:54:02Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "131a9fd2-a301-4a8c-9860-295b44f616fb", "record_id": "flaws_cloudtrail:0000170:131a9fd2-a301-4a8c-9860-295b44f616fb", "row_index": 170, "timestamp": "2019-04-12T03:54:02Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "131a9fd2-a301-4a8c-9860-295b44f616fb", "eventTime": "2019-04-12T03:54:02Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a21698e-9d0d-4d2b-8120-eb5b92459c8c", "record_id": "flaws_cloudtrail:0000171:7a21698e-9d0d-4d2b-8120-eb5b92459c8c", "row_index": 171, "timestamp": "2019-04-12T03:54:02Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 833, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a21698e-9d0d-4d2b-8120-eb5b92459c8c", "eventTime": "2019-04-12T03:54:02Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d17110d-7b6c-4677-a474-8bf933501", "record_id": "flaws_cloudtrail:0000172:1d17110d-7b6c-4677-a474-8bf933501", "row_index": 172, "timestamp": "2019-04-12T03:54:03Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 831, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d17110d-7b6c-4677-a474-8bf933501", "eventTime": "2019-04-12T03:54:03Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b90911-95c1-48da-b799-70cd47fa64b7", "record_id": "flaws_cloudtrail:0000173:b90911-95c1-48da-b799-70cd47fa64b7", "row_index": 173, "timestamp": "2019-04-12T03:54:03Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 836, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b90911-95c1-48da-b799-70cd47fa64b7", "eventTime": "2019-04-12T03:54:03Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5661d66d-ce72-454e-b233-8b8cd6d2efd4", "record_id": "flaws_cloudtrail:0000174:5661d66d-ce72-454e-b233-8b8cd6d2efd4", "row_index": 174, "timestamp": "2019-04-12T03:54:03Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5661d66d-ce72-454e-b233-8b8cd6d2efd4", "eventTime": "2019-04-12T03:54:03Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd746923-b378-41f3-a09c-aeaa7a7483d8", "record_id": "flaws_cloudtrail:0000175:fd746923-b378-41f3-a09c-aeaa7a7483d8", "row_index": 175, "timestamp": "2019-04-12T03:54:03Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 836, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd746923-b378-41f3-a09c-aeaa7a7483d8", "eventTime": "2019-04-12T03:54:03Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15e744304-f0c3-4bef-aa12-8fddff4c3b01", "record_id": "flaws_cloudtrail:0000176:15e744304-f0c3-4bef-aa12-8fddff4c3b01", "row_index": 176, "timestamp": "2019-04-12T03:54:03Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 831, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15e744304-f0c3-4bef-aa12-8fddff4c3b01", "eventTime": "2019-04-12T03:54:03Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "549f7607-1c6f-4248-9d7b-bc38f4ead1f3", "record_id": "flaws_cloudtrail:0000177:549f7607-1c6f-4248-9d7b-bc38f4ead1f3", "row_index": 177, "timestamp": "2019-04-12T03:54:03Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "549f7607-1c6f-4248-9d7b-bc38f4ead1f3", "eventTime": "2019-04-12T03:54:03Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d12a277-e71a-448e-a6ed-5a23fce67706", "record_id": "flaws_cloudtrail:0000178:0d12a277-e71a-448e-a6ed-5a23fce67706", "row_index": 178, "timestamp": "2019-04-12T03:54:03Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d12a277-e71a-448e-a6ed-5a23fce67706", "eventTime": "2019-04-12T03:54:03Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4da368db-0816-4a3a-849f-175783e63cb1", "record_id": "flaws_cloudtrail:0000179:4da368db-0816-4a3a-849f-175783e63cb1", "row_index": 179, "timestamp": "2019-04-12T03:54:03Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4da368db-0816-4a3a-849f-175783e63cb1", "eventTime": "2019-04-12T03:54:03Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7165b16e-e0a2-4d71-9de9-ce270df213cb", "record_id": "flaws_cloudtrail:0000180:7165b16e-e0a2-4d71-9de9-ce270df213cb", "row_index": 180, "timestamp": "2019-04-12T03:54:03Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 836, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7165b16e-e0a2-4d71-9de9-ce270df213cb", "eventTime": "2019-04-12T03:54:03Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "038a0c5d-7144-4fba-9c5c-ec116515988c", "record_id": "flaws_cloudtrail:0000181:038a0c5d-7144-4fba-9c5c-ec116515988c", "row_index": 181, "timestamp": "2019-04-12T03:54:03Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "038a0c5d-7144-4fba-9c5c-ec116515988c", "eventTime": "2019-04-12T03:54:03Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab6babae-3eae-4ab0-8ba8-002bc58672", "record_id": "flaws_cloudtrail:0000182:ab6babae-3eae-4ab0-8ba8-002bc58672", "row_index": 182, "timestamp": "2019-04-12T03:54:03Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 833, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab6babae-3eae-4ab0-8ba8-002bc58672", "eventTime": "2019-04-12T03:54:03Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e151c4b-9e2b-4151-8454-85df299890f7c", "record_id": "flaws_cloudtrail:0000183:7e151c4b-9e2b-4151-8454-85df299890f7c", "row_index": 183, "timestamp": "2019-04-12T03:54:03Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e151c4b-9e2b-4151-8454-85df299890f7c", "eventTime": "2019-04-12T03:54:03Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d17110d-7b6c-4677-a474-8bf933501", "record_id": "flaws_cloudtrail:0000184:1d17110d-7b6c-4677-a474-8bf933501", "row_index": 184, "timestamp": "2019-04-12T03:54:03Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 831, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d17110d-7b6c-4677-a474-8bf933501", "eventTime": "2019-04-12T03:54:03Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b90911-95c1-48da-b799-70cd47fa64b7", "record_id": "flaws_cloudtrail:0000185:b90911-95c1-48da-b799-70cd47fa64b7", "row_index": 185, "timestamp": "2019-04-12T03:54:03Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 836, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b90911-95c1-48da-b799-70cd47fa64b7", "eventTime": "2019-04-12T03:54:03Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5661d66d-ce72-454e-b233-8b8cd6d2efd4", "record_id": "flaws_cloudtrail:0000186:5661d66d-ce72-454e-b233-8b8cd6d2efd4", "row_index": 186, "timestamp": "2019-04-12T03:54:03Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5661d66d-ce72-454e-b233-8b8cd6d2efd4", "eventTime": "2019-04-12T03:54:03Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd746923-b378-41f3-a09c-aeaa7a7483d8", "record_id": "flaws_cloudtrail:0000187:fd746923-b378-41f3-a09c-aeaa7a7483d8", "row_index": 187, "timestamp": "2019-04-12T03:54:03Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 836, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd746923-b378-41f3-a09c-aeaa7a7483d8", "eventTime": "2019-04-12T03:54:03Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15e744304-f0c3-4bef-aa12-8fddff4c3b01", "record_id": "flaws_cloudtrail:0000188:15e744304-f0c3-4bef-aa12-8fddff4c3b01", "row_index": 188, "timestamp": "2019-04-12T03:54:03Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 831, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15e744304-f0c3-4bef-aa12-8fddff4c3b01", "eventTime": "2019-04-12T03:54:03Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "549f7607-1c6f-4248-9d7b-bc38f4ead1f3", "record_id": "flaws_cloudtrail:0000189:549f7607-1c6f-4248-9d7b-bc38f4ead1f3", "row_index": 189, "timestamp": "2019-04-12T03:54:03Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "549f7607-1c6f-4248-9d7b-bc38f4ead1f3", "eventTime": "2019-04-12T03:54:03Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d12a277-e71a-448e-a6ed-5a23fce67706", "record_id": "flaws_cloudtrail:0000190:0d12a277-e71a-448e-a6ed-5a23fce67706", "row_index": 190, "timestamp": "2019-04-12T03:54:03Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d12a277-e71a-448e-a6ed-5a23fce67706", "eventTime": "2019-04-12T03:54:03Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4da368db-0816-4a3a-849f-175783e63cb1", "record_id": "flaws_cloudtrail:0000191:4da368db-0816-4a3a-849f-175783e63cb1", "row_index": 191, "timestamp": "2019-04-12T03:54:03Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4da368db-0816-4a3a-849f-175783e63cb1", "eventTime": "2019-04-12T03:54:03Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7165b16e-e0a2-4d71-9de9-ce270df213cb", "record_id": "flaws_cloudtrail:0000192:7165b16e-e0a2-4d71-9de9-ce270df213cb", "row_index": 192, "timestamp": "2019-04-12T03:54:03Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 836, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7165b16e-e0a2-4d71-9de9-ce270df213cb", "eventTime": "2019-04-12T03:54:03Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "038a0c5d-7144-4fba-9c5c-ec116515988c", "record_id": "flaws_cloudtrail:0000193:038a0c5d-7144-4fba-9c5c-ec116515988c", "row_index": 193, "timestamp": "2019-04-12T03:54:03Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "038a0c5d-7144-4fba-9c5c-ec116515988c", "eventTime": "2019-04-12T03:54:03Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab6babae-3eae-4ab0-8ba8-002bc58672", "record_id": "flaws_cloudtrail:0000194:ab6babae-3eae-4ab0-8ba8-002bc58672", "row_index": 194, "timestamp": "2019-04-12T03:54:03Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 833, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab6babae-3eae-4ab0-8ba8-002bc58672", "eventTime": "2019-04-12T03:54:03Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e151c4b-9e2b-4151-8454-85df299890f7c", "record_id": "flaws_cloudtrail:0000195:7e151c4b-9e2b-4151-8454-85df299890f7c", "row_index": 195, "timestamp": "2019-04-12T03:54:03Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e151c4b-9e2b-4151-8454-85df299890f7c", "eventTime": "2019-04-12T03:54:03Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ce3dbe8-3866-4bcc-999b-0442b1162733", "record_id": "flaws_cloudtrail:0000196:6ce3dbe8-3866-4bcc-999b-0442b1162733", "row_index": 196, "timestamp": "2019-04-12T03:54:04Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ce3dbe8-3866-4bcc-999b-0442b1162733", "eventTime": "2019-04-12T03:54:04Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f6b0680-2148-47e3-95b0-2ba9a81365", "record_id": "flaws_cloudtrail:0000197:4f6b0680-2148-47e3-95b0-2ba9a81365", "row_index": 197, "timestamp": "2019-04-12T03:54:04Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 836, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f6b0680-2148-47e3-95b0-2ba9a81365", "eventTime": "2019-04-12T03:54:04Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4793e384-47ea-453f-a410-b8a76bc22d72", "record_id": "flaws_cloudtrail:0000198:4793e384-47ea-453f-a410-b8a76bc22d72", "row_index": 198, "timestamp": "2019-04-12T03:54:04Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4793e384-47ea-453f-a410-b8a76bc22d72", "eventTime": "2019-04-12T03:54:04Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30822-3903-4ae2-8ee7-f701e9e4b5bc", "record_id": "flaws_cloudtrail:0000199:30822-3903-4ae2-8ee7-f701e9e4b5bc", "row_index": 199, "timestamp": "2019-04-12T03:54:04Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30822-3903-4ae2-8ee7-f701e9e4b5bc", "eventTime": "2019-04-12T03:54:04Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d04e16cb-85f0-4f00-8e42-73d31224", "record_id": "flaws_cloudtrail:0000200:d04e16cb-85f0-4f00-8e42-73d31224", "row_index": 200, "timestamp": "2019-04-12T03:54:04Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d04e16cb-85f0-4f00-8e42-73d31224", "eventTime": "2019-04-12T03:54:04Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2dbc387d-4ed9-4470-b9b9-83cde9236d93", "record_id": "flaws_cloudtrail:0000201:2dbc387d-4ed9-4470-b9b9-83cde9236d93", "row_index": 201, "timestamp": "2019-04-12T03:54:04Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2dbc387d-4ed9-4470-b9b9-83cde9236d93", "eventTime": "2019-04-12T03:54:04Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd2dad09-8de5-44ca-aeea-cf1fc727e415", "record_id": "flaws_cloudtrail:0000202:cd2dad09-8de5-44ca-aeea-cf1fc727e415", "row_index": 202, "timestamp": "2019-04-12T03:54:04Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd2dad09-8de5-44ca-aeea-cf1fc727e415", "eventTime": "2019-04-12T03:54:04Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a4b29061-a9ba-4d8a-a7d3-c84bb61a0442", "record_id": "flaws_cloudtrail:0000203:a4b29061-a9ba-4d8a-a7d3-c84bb61a0442", "row_index": 203, "timestamp": "2019-04-12T03:54:04Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a4b29061-a9ba-4d8a-a7d3-c84bb61a0442", "eventTime": "2019-04-12T03:54:04Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95727-668f-43d4-82e6-dfcbee500c97", "record_id": "flaws_cloudtrail:0000204:95727-668f-43d4-82e6-dfcbee500c97", "row_index": 204, "timestamp": "2019-04-12T03:54:04Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95727-668f-43d4-82e6-dfcbee500c97", "eventTime": "2019-04-12T03:54:04Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "209b28d5-0c16-45f9-9f9f-4b1be3151038", "record_id": "flaws_cloudtrail:0000205:209b28d5-0c16-45f9-9f9f-4b1be3151038", "row_index": 205, "timestamp": "2019-04-12T03:54:04Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "209b28d5-0c16-45f9-9f9f-4b1be3151038", "eventTime": "2019-04-12T03:54:04Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e9594d5-3de8-42fd-8438-d55da64abb00", "record_id": "flaws_cloudtrail:0000206:3e9594d5-3de8-42fd-8438-d55da64abb00", "row_index": 206, "timestamp": "2019-04-12T03:54:04Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 830, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e9594d5-3de8-42fd-8438-d55da64abb00", "eventTime": "2019-04-12T03:54:04Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "793091-90dd-4133-b06e-16ce2ef7755d", "record_id": "flaws_cloudtrail:0000207:793091-90dd-4133-b06e-16ce2ef7755d", "row_index": 207, "timestamp": "2019-04-12T03:54:04Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "793091-90dd-4133-b06e-16ce2ef7755d", "eventTime": "2019-04-12T03:54:04Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c609e719-0438-4632-bdf9-2cd59a7abf93", "record_id": "flaws_cloudtrail:0000208:c609e719-0438-4632-bdf9-2cd59a7abf93", "row_index": 208, "timestamp": "2019-04-12T03:54:04Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c609e719-0438-4632-bdf9-2cd59a7abf93", "eventTime": "2019-04-12T03:54:04Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5fc0a683-8ed7-487e-bd43-8a4d2f272fca", "record_id": "flaws_cloudtrail:0000209:5fc0a683-8ed7-487e-bd43-8a4d2f272fca", "row_index": 209, "timestamp": "2019-04-12T03:54:04Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5fc0a683-8ed7-487e-bd43-8a4d2f272fca", "eventTime": "2019-04-12T03:54:04Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc77e0b0-6d75-4a42-9b3b-a99a7a54a54b", "record_id": "flaws_cloudtrail:0000210:cc77e0b0-6d75-4a42-9b3b-a99a7a54a54b", "row_index": 210, "timestamp": "2019-04-12T03:54:04Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 833, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc77e0b0-6d75-4a42-9b3b-a99a7a54a54b", "eventTime": "2019-04-12T03:54:04Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ce3dbe8-3866-4bcc-999b-0442b1162733", "record_id": "flaws_cloudtrail:0000211:6ce3dbe8-3866-4bcc-999b-0442b1162733", "row_index": 211, "timestamp": "2019-04-12T03:54:04Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ce3dbe8-3866-4bcc-999b-0442b1162733", "eventTime": "2019-04-12T03:54:04Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f6b0680-2148-47e3-95b0-2ba9a81365", "record_id": "flaws_cloudtrail:0000212:4f6b0680-2148-47e3-95b0-2ba9a81365", "row_index": 212, "timestamp": "2019-04-12T03:54:04Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 836, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f6b0680-2148-47e3-95b0-2ba9a81365", "eventTime": "2019-04-12T03:54:04Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4793e384-47ea-453f-a410-b8a76bc22d72", "record_id": "flaws_cloudtrail:0000213:4793e384-47ea-453f-a410-b8a76bc22d72", "row_index": 213, "timestamp": "2019-04-12T03:54:04Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4793e384-47ea-453f-a410-b8a76bc22d72", "eventTime": "2019-04-12T03:54:04Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30822-3903-4ae2-8ee7-f701e9e4b5bc", "record_id": "flaws_cloudtrail:0000214:30822-3903-4ae2-8ee7-f701e9e4b5bc", "row_index": 214, "timestamp": "2019-04-12T03:54:04Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30822-3903-4ae2-8ee7-f701e9e4b5bc", "eventTime": "2019-04-12T03:54:04Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d04e16cb-85f0-4f00-8e42-73d31224", "record_id": "flaws_cloudtrail:0000215:d04e16cb-85f0-4f00-8e42-73d31224", "row_index": 215, "timestamp": "2019-04-12T03:54:04Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d04e16cb-85f0-4f00-8e42-73d31224", "eventTime": "2019-04-12T03:54:04Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2dbc387d-4ed9-4470-b9b9-83cde9236d93", "record_id": "flaws_cloudtrail:0000216:2dbc387d-4ed9-4470-b9b9-83cde9236d93", "row_index": 216, "timestamp": "2019-04-12T03:54:04Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2dbc387d-4ed9-4470-b9b9-83cde9236d93", "eventTime": "2019-04-12T03:54:04Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd2dad09-8de5-44ca-aeea-cf1fc727e415", "record_id": "flaws_cloudtrail:0000217:cd2dad09-8de5-44ca-aeea-cf1fc727e415", "row_index": 217, "timestamp": "2019-04-12T03:54:04Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd2dad09-8de5-44ca-aeea-cf1fc727e415", "eventTime": "2019-04-12T03:54:04Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a4b29061-a9ba-4d8a-a7d3-c84bb61a0442", "record_id": "flaws_cloudtrail:0000218:a4b29061-a9ba-4d8a-a7d3-c84bb61a0442", "row_index": 218, "timestamp": "2019-04-12T03:54:04Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a4b29061-a9ba-4d8a-a7d3-c84bb61a0442", "eventTime": "2019-04-12T03:54:04Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95727-668f-43d4-82e6-dfcbee500c97", "record_id": "flaws_cloudtrail:0000219:95727-668f-43d4-82e6-dfcbee500c97", "row_index": 219, "timestamp": "2019-04-12T03:54:04Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95727-668f-43d4-82e6-dfcbee500c97", "eventTime": "2019-04-12T03:54:04Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "209b28d5-0c16-45f9-9f9f-4b1be3151038", "record_id": "flaws_cloudtrail:0000220:209b28d5-0c16-45f9-9f9f-4b1be3151038", "row_index": 220, "timestamp": "2019-04-12T03:54:04Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "209b28d5-0c16-45f9-9f9f-4b1be3151038", "eventTime": "2019-04-12T03:54:04Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e9594d5-3de8-42fd-8438-d55da64abb00", "record_id": "flaws_cloudtrail:0000221:3e9594d5-3de8-42fd-8438-d55da64abb00", "row_index": 221, "timestamp": "2019-04-12T03:54:04Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 830, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e9594d5-3de8-42fd-8438-d55da64abb00", "eventTime": "2019-04-12T03:54:04Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "793091-90dd-4133-b06e-16ce2ef7755d", "record_id": "flaws_cloudtrail:0000222:793091-90dd-4133-b06e-16ce2ef7755d", "row_index": 222, "timestamp": "2019-04-12T03:54:04Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "793091-90dd-4133-b06e-16ce2ef7755d", "eventTime": "2019-04-12T03:54:04Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c609e719-0438-4632-bdf9-2cd59a7abf93", "record_id": "flaws_cloudtrail:0000223:c609e719-0438-4632-bdf9-2cd59a7abf93", "row_index": 223, "timestamp": "2019-04-12T03:54:04Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c609e719-0438-4632-bdf9-2cd59a7abf93", "eventTime": "2019-04-12T03:54:04Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5fc0a683-8ed7-487e-bd43-8a4d2f272fca", "record_id": "flaws_cloudtrail:0000224:5fc0a683-8ed7-487e-bd43-8a4d2f272fca", "row_index": 224, "timestamp": "2019-04-12T03:54:04Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5fc0a683-8ed7-487e-bd43-8a4d2f272fca", "eventTime": "2019-04-12T03:54:04Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc77e0b0-6d75-4a42-9b3b-a99a7a54a54b", "record_id": "flaws_cloudtrail:0000225:cc77e0b0-6d75-4a42-9b3b-a99a7a54a54b", "row_index": 225, "timestamp": "2019-04-12T03:54:04Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 833, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc77e0b0-6d75-4a42-9b3b-a99a7a54a54b", "eventTime": "2019-04-12T03:54:04Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "010e34ad-f01e-416d-8926-3814e093ef80", "record_id": "flaws_cloudtrail:0000226:010e34ad-f01e-416d-8926-3814e093ef80", "row_index": 226, "timestamp": "2019-04-12T03:54:05Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 832, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "010e34ad-f01e-416d-8926-3814e093ef80", "eventTime": "2019-04-12T03:54:05Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f33126-ccbd-43c0-b2f3-21a5df1ccc1a", "record_id": "flaws_cloudtrail:0000227:8f33126-ccbd-43c0-b2f3-21a5df1ccc1a", "row_index": 227, "timestamp": "2019-04-12T03:54:05Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f33126-ccbd-43c0-b2f3-21a5df1ccc1a", "eventTime": "2019-04-12T03:54:05Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "346c19c9-5971-4798-adeb-752867c1b954", "record_id": "flaws_cloudtrail:0000228:346c19c9-5971-4798-adeb-752867c1b954", "row_index": 228, "timestamp": "2019-04-12T03:54:05Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "346c19c9-5971-4798-adeb-752867c1b954", "eventTime": "2019-04-12T03:54:05Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39833ddc-e107-458c-b599-e6ef01dbd9ca", "record_id": "flaws_cloudtrail:0000229:39833ddc-e107-458c-b599-e6ef01dbd9ca", "row_index": 229, "timestamp": "2019-04-12T03:54:05Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39833ddc-e107-458c-b599-e6ef01dbd9ca", "eventTime": "2019-04-12T03:54:05Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "463413-2d47-43f5-abb4-1ab7b4ab7b40", "record_id": "flaws_cloudtrail:0000230:463413-2d47-43f5-abb4-1ab7b4ab7b40", "row_index": 230, "timestamp": "2019-04-12T03:54:05Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "463413-2d47-43f5-abb4-1ab7b4ab7b40", "eventTime": "2019-04-12T03:54:05Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90e108d5-e142-4ab8-badb-f396c0200a62", "record_id": "flaws_cloudtrail:0000231:90e108d5-e142-4ab8-badb-f396c0200a62", "row_index": 231, "timestamp": "2019-04-12T03:54:05Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90e108d5-e142-4ab8-badb-f396c0200a62", "eventTime": "2019-04-12T03:54:05Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ae88b78-5513-4cce-9044-eed2669c1554", "record_id": "flaws_cloudtrail:0000232:6ae88b78-5513-4cce-9044-eed2669c1554", "row_index": 232, "timestamp": "2019-04-12T03:54:05Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ae88b78-5513-4cce-9044-eed2669c1554", "eventTime": "2019-04-12T03:54:05Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d43671-66d4-42cb-888f-9470b03d0d6d", "record_id": "flaws_cloudtrail:0000233:d43671-66d4-42cb-888f-9470b03d0d6d", "row_index": 233, "timestamp": "2019-04-12T03:54:05Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 831, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d43671-66d4-42cb-888f-9470b03d0d6d", "eventTime": "2019-04-12T03:54:05Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1bab2b9-78c5-470b-8a3b-5947931e612b", "record_id": "flaws_cloudtrail:0000234:c1bab2b9-78c5-470b-8a3b-5947931e612b", "row_index": 234, "timestamp": "2019-04-12T03:54:05Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1bab2b9-78c5-470b-8a3b-5947931e612b", "eventTime": "2019-04-12T03:54:05Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6a56db1-f5b9-4d5a-9292-714f79606a0c", "record_id": "flaws_cloudtrail:0000235:f6a56db1-f5b9-4d5a-9292-714f79606a0c", "row_index": 235, "timestamp": "2019-04-12T03:54:05Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6a56db1-f5b9-4d5a-9292-714f79606a0c", "eventTime": "2019-04-12T03:54:05Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77f356e8-36a7-4400-9a0c-b1e9a06c9f9e", "record_id": "flaws_cloudtrail:0000236:77f356e8-36a7-4400-9a0c-b1e9a06c9f9e", "row_index": 236, "timestamp": "2019-04-12T03:54:05Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 833, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77f356e8-36a7-4400-9a0c-b1e9a06c9f9e", "eventTime": "2019-04-12T03:54:05Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eba644ad-b563-494c-ab12-84e156ee84eb", "record_id": "flaws_cloudtrail:0000237:eba644ad-b563-494c-ab12-84e156ee84eb", "row_index": 237, "timestamp": "2019-04-12T03:54:05Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eba644ad-b563-494c-ab12-84e156ee84eb", "eventTime": "2019-04-12T03:54:05Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c039bef-168d-45e1-88fa-4ea2b9ab4253", "record_id": "flaws_cloudtrail:0000238:0c039bef-168d-45e1-88fa-4ea2b9ab4253", "row_index": 238, "timestamp": "2019-04-12T03:54:05Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c039bef-168d-45e1-88fa-4ea2b9ab4253", "eventTime": "2019-04-12T03:54:05Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f78befc9-e9f5-4a4e-bd04-e22024f2d5e", "record_id": "flaws_cloudtrail:0000239:f78befc9-e9f5-4a4e-bd04-e22024f2d5e", "row_index": 239, "timestamp": "2019-04-12T03:54:05Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 831, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f78befc9-e9f5-4a4e-bd04-e22024f2d5e", "eventTime": "2019-04-12T03:54:05Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "010e34ad-f01e-416d-8926-3814e093ef80", "record_id": "flaws_cloudtrail:0000240:010e34ad-f01e-416d-8926-3814e093ef80", "row_index": 240, "timestamp": "2019-04-12T03:54:05Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 832, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "010e34ad-f01e-416d-8926-3814e093ef80", "eventTime": "2019-04-12T03:54:05Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f33126-ccbd-43c0-b2f3-21a5df1ccc1a", "record_id": "flaws_cloudtrail:0000241:8f33126-ccbd-43c0-b2f3-21a5df1ccc1a", "row_index": 241, "timestamp": "2019-04-12T03:54:05Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f33126-ccbd-43c0-b2f3-21a5df1ccc1a", "eventTime": "2019-04-12T03:54:05Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "346c19c9-5971-4798-adeb-752867c1b954", "record_id": "flaws_cloudtrail:0000242:346c19c9-5971-4798-adeb-752867c1b954", "row_index": 242, "timestamp": "2019-04-12T03:54:05Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "346c19c9-5971-4798-adeb-752867c1b954", "eventTime": "2019-04-12T03:54:05Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39833ddc-e107-458c-b599-e6ef01dbd9ca", "record_id": "flaws_cloudtrail:0000243:39833ddc-e107-458c-b599-e6ef01dbd9ca", "row_index": 243, "timestamp": "2019-04-12T03:54:05Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39833ddc-e107-458c-b599-e6ef01dbd9ca", "eventTime": "2019-04-12T03:54:05Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "463413-2d47-43f5-abb4-1ab7b4ab7b40", "record_id": "flaws_cloudtrail:0000244:463413-2d47-43f5-abb4-1ab7b4ab7b40", "row_index": 244, "timestamp": "2019-04-12T03:54:05Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "463413-2d47-43f5-abb4-1ab7b4ab7b40", "eventTime": "2019-04-12T03:54:05Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90e108d5-e142-4ab8-badb-f396c0200a62", "record_id": "flaws_cloudtrail:0000245:90e108d5-e142-4ab8-badb-f396c0200a62", "row_index": 245, "timestamp": "2019-04-12T03:54:05Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90e108d5-e142-4ab8-badb-f396c0200a62", "eventTime": "2019-04-12T03:54:05Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ae88b78-5513-4cce-9044-eed2669c1554", "record_id": "flaws_cloudtrail:0000246:6ae88b78-5513-4cce-9044-eed2669c1554", "row_index": 246, "timestamp": "2019-04-12T03:54:05Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ae88b78-5513-4cce-9044-eed2669c1554", "eventTime": "2019-04-12T03:54:05Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d43671-66d4-42cb-888f-9470b03d0d6d", "record_id": "flaws_cloudtrail:0000247:d43671-66d4-42cb-888f-9470b03d0d6d", "row_index": 247, "timestamp": "2019-04-12T03:54:05Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 831, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d43671-66d4-42cb-888f-9470b03d0d6d", "eventTime": "2019-04-12T03:54:05Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1bab2b9-78c5-470b-8a3b-5947931e612b", "record_id": "flaws_cloudtrail:0000248:c1bab2b9-78c5-470b-8a3b-5947931e612b", "row_index": 248, "timestamp": "2019-04-12T03:54:05Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1bab2b9-78c5-470b-8a3b-5947931e612b", "eventTime": "2019-04-12T03:54:05Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6a56db1-f5b9-4d5a-9292-714f79606a0c", "record_id": "flaws_cloudtrail:0000249:f6a56db1-f5b9-4d5a-9292-714f79606a0c", "row_index": 249, "timestamp": "2019-04-12T03:54:05Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6a56db1-f5b9-4d5a-9292-714f79606a0c", "eventTime": "2019-04-12T03:54:05Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77f356e8-36a7-4400-9a0c-b1e9a06c9f9e", "record_id": "flaws_cloudtrail:0000250:77f356e8-36a7-4400-9a0c-b1e9a06c9f9e", "row_index": 250, "timestamp": "2019-04-12T03:54:05Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 833, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77f356e8-36a7-4400-9a0c-b1e9a06c9f9e", "eventTime": "2019-04-12T03:54:05Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eba644ad-b563-494c-ab12-84e156ee84eb", "record_id": "flaws_cloudtrail:0000251:eba644ad-b563-494c-ab12-84e156ee84eb", "row_index": 251, "timestamp": "2019-04-12T03:54:05Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eba644ad-b563-494c-ab12-84e156ee84eb", "eventTime": "2019-04-12T03:54:05Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c039bef-168d-45e1-88fa-4ea2b9ab4253", "record_id": "flaws_cloudtrail:0000252:0c039bef-168d-45e1-88fa-4ea2b9ab4253", "row_index": 252, "timestamp": "2019-04-12T03:54:05Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c039bef-168d-45e1-88fa-4ea2b9ab4253", "eventTime": "2019-04-12T03:54:05Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f78befc9-e9f5-4a4e-bd04-e22024f2d5e", "record_id": "flaws_cloudtrail:0000253:f78befc9-e9f5-4a4e-bd04-e22024f2d5e", "row_index": 253, "timestamp": "2019-04-12T03:54:05Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 831, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f78befc9-e9f5-4a4e-bd04-e22024f2d5e", "eventTime": "2019-04-12T03:54:05Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e564672-1ff8-494e-9411-963214a85b90b", "record_id": "flaws_cloudtrail:0000254:e564672-1ff8-494e-9411-963214a85b90b", "row_index": 254, "timestamp": "2019-04-12T03:54:06Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 832, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e564672-1ff8-494e-9411-963214a85b90b", "eventTime": "2019-04-12T03:54:06Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53e1a4f6-f314-4afe-8ba3-d7af347299a6f", "record_id": "flaws_cloudtrail:0000255:53e1a4f6-f314-4afe-8ba3-d7af347299a6f", "row_index": 255, "timestamp": "2019-04-12T03:54:06Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53e1a4f6-f314-4afe-8ba3-d7af347299a6f", "eventTime": "2019-04-12T03:54:06Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00b713973-aef9-4288-b7ab-6f156cfd3efa", "record_id": "flaws_cloudtrail:0000256:00b713973-aef9-4288-b7ab-6f156cfd3efa", "row_index": 256, "timestamp": "2019-04-12T03:54:06Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 830, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00b713973-aef9-4288-b7ab-6f156cfd3efa", "eventTime": "2019-04-12T03:54:06Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dea66f31-91f1-43e3-beba-3bb500a1bf6a", "record_id": "flaws_cloudtrail:0000257:dea66f31-91f1-43e3-beba-3bb500a1bf6a", "row_index": 257, "timestamp": "2019-04-12T03:54:06Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dea66f31-91f1-43e3-beba-3bb500a1bf6a", "eventTime": "2019-04-12T03:54:06Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "544b0168-e4a3-4285-8013-c77ffa5b3ac9", "record_id": "flaws_cloudtrail:0000258:544b0168-e4a3-4285-8013-c77ffa5b3ac9", "row_index": 258, "timestamp": "2019-04-12T03:54:06Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "544b0168-e4a3-4285-8013-c77ffa5b3ac9", "eventTime": "2019-04-12T03:54:06Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbb2c052-dca2-4a87-8213-c394cf922584e", "record_id": "flaws_cloudtrail:0000259:fbb2c052-dca2-4a87-8213-c394cf922584e", "row_index": 259, "timestamp": "2019-04-12T03:54:06Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbb2c052-dca2-4a87-8213-c394cf922584e", "eventTime": "2019-04-12T03:54:06Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "499400d85-e358-4e9d-b92c-0e2df34804d3", "record_id": "flaws_cloudtrail:0000260:499400d85-e358-4e9d-b92c-0e2df34804d3", "row_index": 260, "timestamp": "2019-04-12T03:54:06Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "499400d85-e358-4e9d-b92c-0e2df34804d3", "eventTime": "2019-04-12T03:54:06Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58f0391c-5432-4622-8e3a-f300081866eb", "record_id": "flaws_cloudtrail:0000261:58f0391c-5432-4622-8e3a-f300081866eb", "row_index": 261, "timestamp": "2019-04-12T03:54:06Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58f0391c-5432-4622-8e3a-f300081866eb", "eventTime": "2019-04-12T03:54:06Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a5fee96-4255-436e-b7bc-8530618e180f", "record_id": "flaws_cloudtrail:0000262:6a5fee96-4255-436e-b7bc-8530618e180f", "row_index": 262, "timestamp": "2019-04-12T03:54:06Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a5fee96-4255-436e-b7bc-8530618e180f", "eventTime": "2019-04-12T03:54:06Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "406ca764-cf2c-4093-9d86-dfb2318bdcd7", "record_id": "flaws_cloudtrail:0000263:406ca764-cf2c-4093-9d86-dfb2318bdcd7", "row_index": 263, "timestamp": "2019-04-12T03:54:06Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 833, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "406ca764-cf2c-4093-9d86-dfb2318bdcd7", "eventTime": "2019-04-12T03:54:06Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6cd1e59-ec4d-4f79-8087-0e53d2e5058b", "record_id": "flaws_cloudtrail:0000264:e6cd1e59-ec4d-4f79-8087-0e53d2e5058b", "row_index": 264, "timestamp": "2019-04-12T03:54:06Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6cd1e59-ec4d-4f79-8087-0e53d2e5058b", "eventTime": "2019-04-12T03:54:06Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33e1e909-f132-416a-877f-7996cbd526f9", "record_id": "flaws_cloudtrail:0000265:33e1e909-f132-416a-877f-7996cbd526f9", "row_index": 265, "timestamp": "2019-04-12T03:54:06Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33e1e909-f132-416a-877f-7996cbd526f9", "eventTime": "2019-04-12T03:54:06Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16081d78-b4fc-4506-bf96-b286169ff2c", "record_id": "flaws_cloudtrail:0000266:16081d78-b4fc-4506-bf96-b286169ff2c", "row_index": 266, "timestamp": "2019-04-12T03:54:06Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16081d78-b4fc-4506-bf96-b286169ff2c", "eventTime": "2019-04-12T03:54:06Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc20956-93d8-46aa-9d3f-905219167dad", "record_id": "flaws_cloudtrail:0000267:fc20956-93d8-46aa-9d3f-905219167dad", "row_index": 267, "timestamp": "2019-04-12T03:54:06Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc20956-93d8-46aa-9d3f-905219167dad", "eventTime": "2019-04-12T03:54:06Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e395056d3-6620-470b-a3c8-ae935ddaf3c7", "record_id": "flaws_cloudtrail:0000268:e395056d3-6620-470b-a3c8-ae935ddaf3c7", "row_index": 268, "timestamp": "2019-04-12T03:54:06Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 836, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e395056d3-6620-470b-a3c8-ae935ddaf3c7", "eventTime": "2019-04-12T03:54:06Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74f2ec39-f2df-4086-9778-3c1a4dc966621", "record_id": "flaws_cloudtrail:0000269:74f2ec39-f2df-4086-9778-3c1a4dc966621", "row_index": 269, "timestamp": "2019-04-12T03:54:06Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74f2ec39-f2df-4086-9778-3c1a4dc966621", "eventTime": "2019-04-12T03:54:06Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb1c2fa5-89f4-4d8c-bd46-fb1586fe6fc7", "record_id": "flaws_cloudtrail:0000270:fb1c2fa5-89f4-4d8c-bd46-fb1586fe6fc7", "row_index": 270, "timestamp": "2019-04-12T03:54:06Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb1c2fa5-89f4-4d8c-bd46-fb1586fe6fc7", "eventTime": "2019-04-12T03:54:06Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e564672-1ff8-494e-9411-963214a85b90b", "record_id": "flaws_cloudtrail:0000271:e564672-1ff8-494e-9411-963214a85b90b", "row_index": 271, "timestamp": "2019-04-12T03:54:06Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 832, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e564672-1ff8-494e-9411-963214a85b90b", "eventTime": "2019-04-12T03:54:06Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53e1a4f6-f314-4afe-8ba3-d7af347299a6f", "record_id": "flaws_cloudtrail:0000272:53e1a4f6-f314-4afe-8ba3-d7af347299a6f", "row_index": 272, "timestamp": "2019-04-12T03:54:06Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53e1a4f6-f314-4afe-8ba3-d7af347299a6f", "eventTime": "2019-04-12T03:54:06Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00b713973-aef9-4288-b7ab-6f156cfd3efa", "record_id": "flaws_cloudtrail:0000273:00b713973-aef9-4288-b7ab-6f156cfd3efa", "row_index": 273, "timestamp": "2019-04-12T03:54:06Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 830, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00b713973-aef9-4288-b7ab-6f156cfd3efa", "eventTime": "2019-04-12T03:54:06Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dea66f31-91f1-43e3-beba-3bb500a1bf6a", "record_id": "flaws_cloudtrail:0000274:dea66f31-91f1-43e3-beba-3bb500a1bf6a", "row_index": 274, "timestamp": "2019-04-12T03:54:06Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dea66f31-91f1-43e3-beba-3bb500a1bf6a", "eventTime": "2019-04-12T03:54:06Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "544b0168-e4a3-4285-8013-c77ffa5b3ac9", "record_id": "flaws_cloudtrail:0000275:544b0168-e4a3-4285-8013-c77ffa5b3ac9", "row_index": 275, "timestamp": "2019-04-12T03:54:06Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "544b0168-e4a3-4285-8013-c77ffa5b3ac9", "eventTime": "2019-04-12T03:54:06Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbb2c052-dca2-4a87-8213-c394cf922584e", "record_id": "flaws_cloudtrail:0000276:fbb2c052-dca2-4a87-8213-c394cf922584e", "row_index": 276, "timestamp": "2019-04-12T03:54:06Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbb2c052-dca2-4a87-8213-c394cf922584e", "eventTime": "2019-04-12T03:54:06Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "499400d85-e358-4e9d-b92c-0e2df34804d3", "record_id": "flaws_cloudtrail:0000277:499400d85-e358-4e9d-b92c-0e2df34804d3", "row_index": 277, "timestamp": "2019-04-12T03:54:06Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "499400d85-e358-4e9d-b92c-0e2df34804d3", "eventTime": "2019-04-12T03:54:06Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58f0391c-5432-4622-8e3a-f300081866eb", "record_id": "flaws_cloudtrail:0000278:58f0391c-5432-4622-8e3a-f300081866eb", "row_index": 278, "timestamp": "2019-04-12T03:54:06Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58f0391c-5432-4622-8e3a-f300081866eb", "eventTime": "2019-04-12T03:54:06Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a5fee96-4255-436e-b7bc-8530618e180f", "record_id": "flaws_cloudtrail:0000279:6a5fee96-4255-436e-b7bc-8530618e180f", "row_index": 279, "timestamp": "2019-04-12T03:54:06Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a5fee96-4255-436e-b7bc-8530618e180f", "eventTime": "2019-04-12T03:54:06Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "406ca764-cf2c-4093-9d86-dfb2318bdcd7", "record_id": "flaws_cloudtrail:0000280:406ca764-cf2c-4093-9d86-dfb2318bdcd7", "row_index": 280, "timestamp": "2019-04-12T03:54:06Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 833, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "406ca764-cf2c-4093-9d86-dfb2318bdcd7", "eventTime": "2019-04-12T03:54:06Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6cd1e59-ec4d-4f79-8087-0e53d2e5058b", "record_id": "flaws_cloudtrail:0000281:e6cd1e59-ec4d-4f79-8087-0e53d2e5058b", "row_index": 281, "timestamp": "2019-04-12T03:54:06Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6cd1e59-ec4d-4f79-8087-0e53d2e5058b", "eventTime": "2019-04-12T03:54:06Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33e1e909-f132-416a-877f-7996cbd526f9", "record_id": "flaws_cloudtrail:0000282:33e1e909-f132-416a-877f-7996cbd526f9", "row_index": 282, "timestamp": "2019-04-12T03:54:06Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33e1e909-f132-416a-877f-7996cbd526f9", "eventTime": "2019-04-12T03:54:06Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16081d78-b4fc-4506-bf96-b286169ff2c", "record_id": "flaws_cloudtrail:0000283:16081d78-b4fc-4506-bf96-b286169ff2c", "row_index": 283, "timestamp": "2019-04-12T03:54:06Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16081d78-b4fc-4506-bf96-b286169ff2c", "eventTime": "2019-04-12T03:54:06Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc20956-93d8-46aa-9d3f-905219167dad", "record_id": "flaws_cloudtrail:0000284:fc20956-93d8-46aa-9d3f-905219167dad", "row_index": 284, "timestamp": "2019-04-12T03:54:06Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc20956-93d8-46aa-9d3f-905219167dad", "eventTime": "2019-04-12T03:54:06Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e395056d3-6620-470b-a3c8-ae935ddaf3c7", "record_id": "flaws_cloudtrail:0000285:e395056d3-6620-470b-a3c8-ae935ddaf3c7", "row_index": 285, "timestamp": "2019-04-12T03:54:06Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 836, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e395056d3-6620-470b-a3c8-ae935ddaf3c7", "eventTime": "2019-04-12T03:54:06Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74f2ec39-f2df-4086-9778-3c1a4dc966621", "record_id": "flaws_cloudtrail:0000286:74f2ec39-f2df-4086-9778-3c1a4dc966621", "row_index": 286, "timestamp": "2019-04-12T03:54:06Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74f2ec39-f2df-4086-9778-3c1a4dc966621", "eventTime": "2019-04-12T03:54:06Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb1c2fa5-89f4-4d8c-bd46-fb1586fe6fc7", "record_id": "flaws_cloudtrail:0000287:fb1c2fa5-89f4-4d8c-bd46-fb1586fe6fc7", "row_index": 287, "timestamp": "2019-04-12T03:54:06Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb1c2fa5-89f4-4d8c-bd46-fb1586fe6fc7", "eventTime": "2019-04-12T03:54:06Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77544-e765-4899-a524-fd8e7490b2cb", "record_id": "flaws_cloudtrail:0000288:77544-e765-4899-a524-fd8e7490b2cb", "row_index": 288, "timestamp": "2019-04-12T03:54:07Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77544-e765-4899-a524-fd8e7490b2cb", "eventTime": "2019-04-12T03:54:07Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77544-e765-4899-a524-fd8e7490b2cb", "record_id": "flaws_cloudtrail:0000289:77544-e765-4899-a524-fd8e7490b2cb", "row_index": 289, "timestamp": "2019-04-12T03:54:07Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77544-e765-4899-a524-fd8e7490b2cb", "eventTime": "2019-04-12T03:54:07Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ebe1555-eb4b-4a13-9d41-966b235534dfb", "record_id": "flaws_cloudtrail:0000290:8ebe1555-eb4b-4a13-9d41-966b235534dfb", "row_index": 290, "timestamp": "2019-04-12T03:54:10Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 872, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ebe1555-eb4b-4a13-9d41-966b235534dfb", "eventTime": "2019-04-12T03:54:10Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a15fbdd6-c861-40b2-9417-acf21dcf4ed1", "record_id": "flaws_cloudtrail:0000291:a15fbdd6-c861-40b2-9417-acf21dcf4ed1", "row_index": 291, "timestamp": "2019-04-12T03:54:10Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 871, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a15fbdd6-c861-40b2-9417-acf21dcf4ed1", "eventTime": "2019-04-12T03:54:10Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01506e7-7c9b-4cda-8c28-ac7992bb5487", "record_id": "flaws_cloudtrail:0000292:01506e7-7c9b-4cda-8c28-ac7992bb5487", "row_index": 292, "timestamp": "2019-04-12T03:54:10Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01506e7-7c9b-4cda-8c28-ac7992bb5487", "eventTime": "2019-04-12T03:54:10Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9053e23-7b05-4f39-be6c-191fb0adde92", "record_id": "flaws_cloudtrail:0000293:b9053e23-7b05-4f39-be6c-191fb0adde92", "row_index": 293, "timestamp": "2019-04-12T03:54:10Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 871, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9053e23-7b05-4f39-be6c-191fb0adde92", "eventTime": "2019-04-12T03:54:10Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f33d777-f585-40f3-8967-1331c8344d38", "record_id": "flaws_cloudtrail:0000294:1f33d777-f585-40f3-8967-1331c8344d38", "row_index": 294, "timestamp": "2019-04-12T03:54:10Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 871, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f33d777-f585-40f3-8967-1331c8344d38", "eventTime": "2019-04-12T03:54:10Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ebe1555-eb4b-4a13-9d41-966b235534dfb", "record_id": "flaws_cloudtrail:0000295:8ebe1555-eb4b-4a13-9d41-966b235534dfb", "row_index": 295, "timestamp": "2019-04-12T03:54:10Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 872, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ebe1555-eb4b-4a13-9d41-966b235534dfb", "eventTime": "2019-04-12T03:54:10Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a15fbdd6-c861-40b2-9417-acf21dcf4ed1", "record_id": "flaws_cloudtrail:0000296:a15fbdd6-c861-40b2-9417-acf21dcf4ed1", "row_index": 296, "timestamp": "2019-04-12T03:54:10Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 871, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a15fbdd6-c861-40b2-9417-acf21dcf4ed1", "eventTime": "2019-04-12T03:54:10Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01506e7-7c9b-4cda-8c28-ac7992bb5487", "record_id": "flaws_cloudtrail:0000297:01506e7-7c9b-4cda-8c28-ac7992bb5487", "row_index": 297, "timestamp": "2019-04-12T03:54:10Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01506e7-7c9b-4cda-8c28-ac7992bb5487", "eventTime": "2019-04-12T03:54:10Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9053e23-7b05-4f39-be6c-191fb0adde92", "record_id": "flaws_cloudtrail:0000298:b9053e23-7b05-4f39-be6c-191fb0adde92", "row_index": 298, "timestamp": "2019-04-12T03:54:10Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 871, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9053e23-7b05-4f39-be6c-191fb0adde92", "eventTime": "2019-04-12T03:54:10Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f33d777-f585-40f3-8967-1331c8344d38", "record_id": "flaws_cloudtrail:0000299:1f33d777-f585-40f3-8967-1331c8344d38", "row_index": 299, "timestamp": "2019-04-12T03:54:10Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 871, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f33d777-f585-40f3-8967-1331c8344d38", "eventTime": "2019-04-12T03:54:10Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0208dc1-1de5-4a38-9a80-918746ea4cb30", "record_id": "flaws_cloudtrail:0000300:d0208dc1-1de5-4a38-9a80-918746ea4cb30", "row_index": 300, "timestamp": "2019-04-12T03:54:11Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 872, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0208dc1-1de5-4a38-9a80-918746ea4cb30", "eventTime": "2019-04-12T03:54:11Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03cfc57d-4ff1-49d2-996e-846ce357bd64", "record_id": "flaws_cloudtrail:0000301:03cfc57d-4ff1-49d2-996e-846ce357bd64", "row_index": 301, "timestamp": "2019-04-12T03:54:11Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 869, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03cfc57d-4ff1-49d2-996e-846ce357bd64", "eventTime": "2019-04-12T03:54:11Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f4712f2-5bce-43f1-85f1-d2d34e208235c", "record_id": "flaws_cloudtrail:0000302:7f4712f2-5bce-43f1-85f1-d2d34e208235c", "row_index": 302, "timestamp": "2019-04-12T03:54:11Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f4712f2-5bce-43f1-85f1-d2d34e208235c", "eventTime": "2019-04-12T03:54:11Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50e999204-b9e2-4ed1-9f82-8c980f9564de", "record_id": "flaws_cloudtrail:0000303:50e999204-b9e2-4ed1-9f82-8c980f9564de", "row_index": 303, "timestamp": "2019-04-12T03:54:11Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50e999204-b9e2-4ed1-9f82-8c980f9564de", "eventTime": "2019-04-12T03:54:11Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ebaf8cb5-6973-4ac4-8d92-7ea986dcf5ea", "record_id": "flaws_cloudtrail:0000304:ebaf8cb5-6973-4ac4-8d92-7ea986dcf5ea", "row_index": 304, "timestamp": "2019-04-12T03:54:11Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ebaf8cb5-6973-4ac4-8d92-7ea986dcf5ea", "eventTime": "2019-04-12T03:54:11Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f26b824-3766-487a-a167-1a4c80b107bf", "record_id": "flaws_cloudtrail:0000305:9f26b824-3766-487a-a167-1a4c80b107bf", "row_index": 305, "timestamp": "2019-04-12T03:54:11Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f26b824-3766-487a-a167-1a4c80b107bf", "eventTime": "2019-04-12T03:54:11Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0208dc1-1de5-4a38-9a80-918746ea4cb30", "record_id": "flaws_cloudtrail:0000306:d0208dc1-1de5-4a38-9a80-918746ea4cb30", "row_index": 306, "timestamp": "2019-04-12T03:54:11Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 872, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0208dc1-1de5-4a38-9a80-918746ea4cb30", "eventTime": "2019-04-12T03:54:11Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03cfc57d-4ff1-49d2-996e-846ce357bd64", "record_id": "flaws_cloudtrail:0000307:03cfc57d-4ff1-49d2-996e-846ce357bd64", "row_index": 307, "timestamp": "2019-04-12T03:54:11Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 869, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03cfc57d-4ff1-49d2-996e-846ce357bd64", "eventTime": "2019-04-12T03:54:11Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f4712f2-5bce-43f1-85f1-d2d34e208235c", "record_id": "flaws_cloudtrail:0000308:7f4712f2-5bce-43f1-85f1-d2d34e208235c", "row_index": 308, "timestamp": "2019-04-12T03:54:11Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f4712f2-5bce-43f1-85f1-d2d34e208235c", "eventTime": "2019-04-12T03:54:11Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50e999204-b9e2-4ed1-9f82-8c980f9564de", "record_id": "flaws_cloudtrail:0000309:50e999204-b9e2-4ed1-9f82-8c980f9564de", "row_index": 309, "timestamp": "2019-04-12T03:54:11Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50e999204-b9e2-4ed1-9f82-8c980f9564de", "eventTime": "2019-04-12T03:54:11Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ebaf8cb5-6973-4ac4-8d92-7ea986dcf5ea", "record_id": "flaws_cloudtrail:0000310:ebaf8cb5-6973-4ac4-8d92-7ea986dcf5ea", "row_index": 310, "timestamp": "2019-04-12T03:54:11Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ebaf8cb5-6973-4ac4-8d92-7ea986dcf5ea", "eventTime": "2019-04-12T03:54:11Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f26b824-3766-487a-a167-1a4c80b107bf", "record_id": "flaws_cloudtrail:0000311:9f26b824-3766-487a-a167-1a4c80b107bf", "row_index": 311, "timestamp": "2019-04-12T03:54:11Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f26b824-3766-487a-a167-1a4c80b107bf", "eventTime": "2019-04-12T03:54:11Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "861021f09-88ea-4a97-a94c-04f6df6784f1", "record_id": "flaws_cloudtrail:0000312:861021f09-88ea-4a97-a94c-04f6df6784f1", "row_index": 312, "timestamp": "2019-04-12T03:54:12Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "861021f09-88ea-4a97-a94c-04f6df6784f1", "eventTime": "2019-04-12T03:54:12Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20efbb42-2cdc-42f0-b651-5e4af124f807", "record_id": "flaws_cloudtrail:0000313:20efbb42-2cdc-42f0-b651-5e4af124f807", "row_index": 313, "timestamp": "2019-04-12T03:54:12Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 865, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20efbb42-2cdc-42f0-b651-5e4af124f807", "eventTime": "2019-04-12T03:54:12Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac3337e2-a13c-4b8e-8725-b2c023d6b708", "record_id": "flaws_cloudtrail:0000314:ac3337e2-a13c-4b8e-8725-b2c023d6b708", "row_index": 314, "timestamp": "2019-04-12T03:54:12Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac3337e2-a13c-4b8e-8725-b2c023d6b708", "eventTime": "2019-04-12T03:54:12Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "861021f09-88ea-4a97-a94c-04f6df6784f1", "record_id": "flaws_cloudtrail:0000315:861021f09-88ea-4a97-a94c-04f6df6784f1", "row_index": 315, "timestamp": "2019-04-12T03:54:12Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "861021f09-88ea-4a97-a94c-04f6df6784f1", "eventTime": "2019-04-12T03:54:12Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20efbb42-2cdc-42f0-b651-5e4af124f807", "record_id": "flaws_cloudtrail:0000316:20efbb42-2cdc-42f0-b651-5e4af124f807", "row_index": 316, "timestamp": "2019-04-12T03:54:12Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 865, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20efbb42-2cdc-42f0-b651-5e4af124f807", "eventTime": "2019-04-12T03:54:12Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac3337e2-a13c-4b8e-8725-b2c023d6b708", "record_id": "flaws_cloudtrail:0000317:ac3337e2-a13c-4b8e-8725-b2c023d6b708", "row_index": 317, "timestamp": "2019-04-12T03:54:12Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac3337e2-a13c-4b8e-8725-b2c023d6b708", "eventTime": "2019-04-12T03:54:12Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae192587d-de0d-4b33-bd2d-48194ef55667", "record_id": "flaws_cloudtrail:0000318:ae192587d-de0d-4b33-bd2d-48194ef55667", "row_index": 318, "timestamp": "2019-04-12T03:54:13Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae192587d-de0d-4b33-bd2d-48194ef55667", "eventTime": "2019-04-12T03:54:13Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5966d12b-5cdc-45f5-ac5c-2a21a89b54ae", "record_id": "flaws_cloudtrail:0000319:5966d12b-5cdc-45f5-ac5c-2a21a89b54ae", "row_index": 319, "timestamp": "2019-04-12T03:54:13Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5966d12b-5cdc-45f5-ac5c-2a21a89b54ae", "eventTime": "2019-04-12T03:54:13Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae192587d-de0d-4b33-bd2d-48194ef55667", "record_id": "flaws_cloudtrail:0000320:ae192587d-de0d-4b33-bd2d-48194ef55667", "row_index": 320, "timestamp": "2019-04-12T03:54:13Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae192587d-de0d-4b33-bd2d-48194ef55667", "eventTime": "2019-04-12T03:54:13Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5966d12b-5cdc-45f5-ac5c-2a21a89b54ae", "record_id": "flaws_cloudtrail:0000321:5966d12b-5cdc-45f5-ac5c-2a21a89b54ae", "row_index": 321, "timestamp": "2019-04-12T03:54:13Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5966d12b-5cdc-45f5-ac5c-2a21a89b54ae", "eventTime": "2019-04-12T03:54:13Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudtrail:DescribeTrails", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8ad9715-bdbd-4fb2-862c-568f7c52aba3", "record_id": "flaws_cloudtrail:0000322:f8ad9715-bdbd-4fb2-862c-568f7c52aba3", "row_index": 322, "timestamp": "2019-04-12T03:54:16Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8ad9715-bdbd-4fb2-862c-568f7c52aba3", "eventTime": "2019-04-12T03:54:16Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99b74f10-5e64-49ec-9192-bd9ea674d855", "record_id": "flaws_cloudtrail:0000323:99b74f10-5e64-49ec-9192-bd9ea674d855", "row_index": 323, "timestamp": "2019-04-12T03:54:16Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99b74f10-5e64-49ec-9192-bd9ea674d855", "eventTime": "2019-04-12T03:54:16Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8ad9715-bdbd-4fb2-862c-568f7c52aba3", "record_id": "flaws_cloudtrail:0000324:f8ad9715-bdbd-4fb2-862c-568f7c52aba3", "row_index": 324, "timestamp": "2019-04-12T03:54:16Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8ad9715-bdbd-4fb2-862c-568f7c52aba3", "eventTime": "2019-04-12T03:54:16Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99b74f10-5e64-49ec-9192-bd9ea674d855", "record_id": "flaws_cloudtrail:0000325:99b74f10-5e64-49ec-9192-bd9ea674d855", "row_index": 325, "timestamp": "2019-04-12T03:54:16Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99b74f10-5e64-49ec-9192-bd9ea674d855", "eventTime": "2019-04-12T03:54:16Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd590bf5-4dee-4a7c-8335-78b05516a7b", "record_id": "flaws_cloudtrail:0000326:fd590bf5-4dee-4a7c-8335-78b05516a7b", "row_index": 326, "timestamp": "2019-04-12T03:54:17Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 865, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd590bf5-4dee-4a7c-8335-78b05516a7b", "eventTime": "2019-04-12T03:54:17Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4d1817a-7cd2-4b12-8923-273231d9bc4e", "record_id": "flaws_cloudtrail:0000327:c4d1817a-7cd2-4b12-8923-273231d9bc4e", "row_index": 327, "timestamp": "2019-04-12T03:54:17Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4d1817a-7cd2-4b12-8923-273231d9bc4e", "eventTime": "2019-04-12T03:54:17Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12114f27-4847-4aa7-aff4-bddab527650f3", "record_id": "flaws_cloudtrail:0000328:12114f27-4847-4aa7-aff4-bddab527650f3", "row_index": 328, "timestamp": "2019-04-12T03:54:17Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12114f27-4847-4aa7-aff4-bddab527650f3", "eventTime": "2019-04-12T03:54:17Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd590bf5-4dee-4a7c-8335-78b05516a7b", "record_id": "flaws_cloudtrail:0000329:fd590bf5-4dee-4a7c-8335-78b05516a7b", "row_index": 329, "timestamp": "2019-04-12T03:54:17Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 865, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd590bf5-4dee-4a7c-8335-78b05516a7b", "eventTime": "2019-04-12T03:54:17Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4d1817a-7cd2-4b12-8923-273231d9bc4e", "record_id": "flaws_cloudtrail:0000330:c4d1817a-7cd2-4b12-8923-273231d9bc4e", "row_index": 330, "timestamp": "2019-04-12T03:54:17Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4d1817a-7cd2-4b12-8923-273231d9bc4e", "eventTime": "2019-04-12T03:54:17Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12114f27-4847-4aa7-aff4-bddab527650f3", "record_id": "flaws_cloudtrail:0000331:12114f27-4847-4aa7-aff4-bddab527650f3", "row_index": 331, "timestamp": "2019-04-12T03:54:17Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12114f27-4847-4aa7-aff4-bddab527650f3", "eventTime": "2019-04-12T03:54:17Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ebfd125a-741d-4910-b4d1-a18f328502f", "record_id": "flaws_cloudtrail:0000332:ebfd125a-741d-4910-b4d1-a18f328502f", "row_index": 332, "timestamp": "2019-04-12T03:54:18Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 865, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ebfd125a-741d-4910-b4d1-a18f328502f", "eventTime": "2019-04-12T03:54:18Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f23b4d6-e13b-415c-9bfb-5abd5bad9b7b", "record_id": "flaws_cloudtrail:0000333:1f23b4d6-e13b-415c-9bfb-5abd5bad9b7b", "row_index": 333, "timestamp": "2019-04-12T03:54:18Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f23b4d6-e13b-415c-9bfb-5abd5bad9b7b", "eventTime": "2019-04-12T03:54:18Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5fe4a13e-f71d-40cf-b287-f69df9b10882", "record_id": "flaws_cloudtrail:0000334:5fe4a13e-f71d-40cf-b287-f69df9b10882", "row_index": 334, "timestamp": "2019-04-12T03:54:18Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5fe4a13e-f71d-40cf-b287-f69df9b10882", "eventTime": "2019-04-12T03:54:18Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a65cd1a-8e10-4b19-a2a6-df03d1f40da1", "record_id": "flaws_cloudtrail:0000335:4a65cd1a-8e10-4b19-a2a6-df03d1f40da1", "row_index": 335, "timestamp": "2019-04-12T03:54:18Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a65cd1a-8e10-4b19-a2a6-df03d1f40da1", "eventTime": "2019-04-12T03:54:18Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba3f1bb4-3350-4143-a3c6-d921805c1", "record_id": "flaws_cloudtrail:0000336:ba3f1bb4-3350-4143-a3c6-d921805c1", "row_index": 336, "timestamp": "2019-04-12T03:54:18Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba3f1bb4-3350-4143-a3c6-d921805c1", "eventTime": "2019-04-12T03:54:18Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7bdce9f-4578-4f8a-87e3-ced4203e292b", "record_id": "flaws_cloudtrail:0000337:c7bdce9f-4578-4f8a-87e3-ced4203e292b", "row_index": 337, "timestamp": "2019-04-12T03:54:18Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7bdce9f-4578-4f8a-87e3-ced4203e292b", "eventTime": "2019-04-12T03:54:18Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0feaf3a7-ae5c-4054-b76d-f72f55f8723a", "record_id": "flaws_cloudtrail:0000338:0feaf3a7-ae5c-4054-b76d-f72f55f8723a", "row_index": 338, "timestamp": "2019-04-12T03:54:18Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0feaf3a7-ae5c-4054-b76d-f72f55f8723a", "eventTime": "2019-04-12T03:54:18Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ebfd125a-741d-4910-b4d1-a18f328502f", "record_id": "flaws_cloudtrail:0000339:ebfd125a-741d-4910-b4d1-a18f328502f", "row_index": 339, "timestamp": "2019-04-12T03:54:18Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 865, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ebfd125a-741d-4910-b4d1-a18f328502f", "eventTime": "2019-04-12T03:54:18Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f23b4d6-e13b-415c-9bfb-5abd5bad9b7b", "record_id": "flaws_cloudtrail:0000340:1f23b4d6-e13b-415c-9bfb-5abd5bad9b7b", "row_index": 340, "timestamp": "2019-04-12T03:54:18Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f23b4d6-e13b-415c-9bfb-5abd5bad9b7b", "eventTime": "2019-04-12T03:54:18Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5fe4a13e-f71d-40cf-b287-f69df9b10882", "record_id": "flaws_cloudtrail:0000341:5fe4a13e-f71d-40cf-b287-f69df9b10882", "row_index": 341, "timestamp": "2019-04-12T03:54:18Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5fe4a13e-f71d-40cf-b287-f69df9b10882", "eventTime": "2019-04-12T03:54:18Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a65cd1a-8e10-4b19-a2a6-df03d1f40da1", "record_id": "flaws_cloudtrail:0000342:4a65cd1a-8e10-4b19-a2a6-df03d1f40da1", "row_index": 342, "timestamp": "2019-04-12T03:54:18Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a65cd1a-8e10-4b19-a2a6-df03d1f40da1", "eventTime": "2019-04-12T03:54:18Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba3f1bb4-3350-4143-a3c6-d921805c1", "record_id": "flaws_cloudtrail:0000343:ba3f1bb4-3350-4143-a3c6-d921805c1", "row_index": 343, "timestamp": "2019-04-12T03:54:18Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba3f1bb4-3350-4143-a3c6-d921805c1", "eventTime": "2019-04-12T03:54:18Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7bdce9f-4578-4f8a-87e3-ced4203e292b", "record_id": "flaws_cloudtrail:0000344:c7bdce9f-4578-4f8a-87e3-ced4203e292b", "row_index": 344, "timestamp": "2019-04-12T03:54:18Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7bdce9f-4578-4f8a-87e3-ced4203e292b", "eventTime": "2019-04-12T03:54:18Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0feaf3a7-ae5c-4054-b76d-f72f55f8723a", "record_id": "flaws_cloudtrail:0000345:0feaf3a7-ae5c-4054-b76d-f72f55f8723a", "row_index": 345, "timestamp": "2019-04-12T03:54:18Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0feaf3a7-ae5c-4054-b76d-f72f55f8723a", "eventTime": "2019-04-12T03:54:18Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b95322-a35b-4a15-8edb-54361bb6cedf", "record_id": "flaws_cloudtrail:0000346:9b95322-a35b-4a15-8edb-54361bb6cedf", "row_index": 346, "timestamp": "2019-04-12T03:54:19Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b95322-a35b-4a15-8edb-54361bb6cedf", "eventTime": "2019-04-12T03:54:19Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7e7da08-67cb-48ee-8e13-7550edb67871", "record_id": "flaws_cloudtrail:0000347:d7e7da08-67cb-48ee-8e13-7550edb67871", "row_index": 347, "timestamp": "2019-04-12T03:54:19Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7e7da08-67cb-48ee-8e13-7550edb67871", "eventTime": "2019-04-12T03:54:19Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "692704f1-2d95-4e48-b273-dc1dcb8fbcaa", "record_id": "flaws_cloudtrail:0000348:692704f1-2d95-4e48-b273-dc1dcb8fbcaa", "row_index": 348, "timestamp": "2019-04-12T03:54:19Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "692704f1-2d95-4e48-b273-dc1dcb8fbcaa", "eventTime": "2019-04-12T03:54:19Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "258b8709-60c2-4cfa-ade9-99cf119f46b2", "record_id": "flaws_cloudtrail:0000349:258b8709-60c2-4cfa-ade9-99cf119f46b2", "row_index": 349, "timestamp": "2019-04-12T03:54:19Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "258b8709-60c2-4cfa-ade9-99cf119f46b2", "eventTime": "2019-04-12T03:54:19Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b95322-a35b-4a15-8edb-54361bb6cedf", "record_id": "flaws_cloudtrail:0000350:9b95322-a35b-4a15-8edb-54361bb6cedf", "row_index": 350, "timestamp": "2019-04-12T03:54:19Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b95322-a35b-4a15-8edb-54361bb6cedf", "eventTime": "2019-04-12T03:54:19Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7e7da08-67cb-48ee-8e13-7550edb67871", "record_id": "flaws_cloudtrail:0000351:d7e7da08-67cb-48ee-8e13-7550edb67871", "row_index": 351, "timestamp": "2019-04-12T03:54:19Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7e7da08-67cb-48ee-8e13-7550edb67871", "eventTime": "2019-04-12T03:54:19Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "692704f1-2d95-4e48-b273-dc1dcb8fbcaa", "record_id": "flaws_cloudtrail:0000352:692704f1-2d95-4e48-b273-dc1dcb8fbcaa", "row_index": 352, "timestamp": "2019-04-12T03:54:19Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "692704f1-2d95-4e48-b273-dc1dcb8fbcaa", "eventTime": "2019-04-12T03:54:19Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "258b8709-60c2-4cfa-ade9-99cf119f46b2", "record_id": "flaws_cloudtrail:0000353:258b8709-60c2-4cfa-ade9-99cf119f46b2", "row_index": 353, "timestamp": "2019-04-12T03:54:19Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "258b8709-60c2-4cfa-ade9-99cf119f46b2", "eventTime": "2019-04-12T03:54:19Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c9c50cc-4516-4c1a-95f0-166d2ec999034", "record_id": "flaws_cloudtrail:0000354:2c9c50cc-4516-4c1a-95f0-166d2ec999034", "row_index": 354, "timestamp": "2019-04-12T03:54:22Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 938, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c9c50cc-4516-4c1a-95f0-166d2ec999034", "eventTime": "2019-04-12T03:54:22Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:ap-northeast-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e973717d-aafe-46be-8f15-c90f299369ba", "record_id": "flaws_cloudtrail:0000355:1e973717d-aafe-46be-8f15-c90f299369ba", "row_index": 355, "timestamp": "2019-04-12T03:54:22Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 938, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e973717d-aafe-46be-8f15-c90f299369ba", "eventTime": "2019-04-12T03:54:22Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:ap-northeast-2:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ade4f892-bfb7-4238-83a0-c1a97bc8808e", "record_id": "flaws_cloudtrail:0000356:ade4f892-bfb7-4238-83a0-c1a97bc8808e", "row_index": 356, "timestamp": "2019-04-12T03:54:22Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 937, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ade4f892-bfb7-4238-83a0-c1a97bc8808e", "eventTime": "2019-04-12T03:54:22Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:ap-southeast-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c9c50cc-4516-4c1a-95f0-166d2ec999034", "record_id": "flaws_cloudtrail:0000357:2c9c50cc-4516-4c1a-95f0-166d2ec999034", "row_index": 357, "timestamp": "2019-04-12T03:54:22Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 938, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c9c50cc-4516-4c1a-95f0-166d2ec999034", "eventTime": "2019-04-12T03:54:22Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:ap-northeast-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e973717d-aafe-46be-8f15-c90f299369ba", "record_id": "flaws_cloudtrail:0000358:1e973717d-aafe-46be-8f15-c90f299369ba", "row_index": 358, "timestamp": "2019-04-12T03:54:22Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 938, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e973717d-aafe-46be-8f15-c90f299369ba", "eventTime": "2019-04-12T03:54:22Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:ap-northeast-2:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ade4f892-bfb7-4238-83a0-c1a97bc8808e", "record_id": "flaws_cloudtrail:0000359:ade4f892-bfb7-4238-83a0-c1a97bc8808e", "row_index": 359, "timestamp": "2019-04-12T03:54:22Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 937, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ade4f892-bfb7-4238-83a0-c1a97bc8808e", "eventTime": "2019-04-12T03:54:22Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:ap-southeast-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20677-646f-46d8-97ae-094c21b5e3be", "record_id": "flaws_cloudtrail:0000360:20677-646f-46d8-97ae-094c21b5e3be", "row_index": 360, "timestamp": "2019-04-12T03:54:23Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 930, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20677-646f-46d8-97ae-094c21b5e3be", "eventTime": "2019-04-12T03:54:23Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:ap-southeast-2:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7ee623f-6c08-4fdc-b660-62c81faca320", "record_id": "flaws_cloudtrail:0000361:d7ee623f-6c08-4fdc-b660-62c81faca320", "row_index": 361, "timestamp": "2019-04-12T03:54:23Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 933, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7ee623f-6c08-4fdc-b660-62c81faca320", "eventTime": "2019-04-12T03:54:23Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:eu-central-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "684145f25-c6be-4c36-b619-36b82fe684812", "record_id": "flaws_cloudtrail:0000362:684145f25-c6be-4c36-b619-36b82fe684812", "row_index": 362, "timestamp": "2019-04-12T03:54:23Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 929, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "684145f25-c6be-4c36-b619-36b82fe684812", "eventTime": "2019-04-12T03:54:23Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:eu-west-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed67df68-545a-4c30-8b4f-fe55aea4d067", "record_id": "flaws_cloudtrail:0000363:ed67df68-545a-4c30-8b4f-fe55aea4d067", "row_index": 363, "timestamp": "2019-04-12T03:54:23Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 927, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed67df68-545a-4c30-8b4f-fe55aea4d067", "eventTime": "2019-04-12T03:54:23Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:eu-west-2:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e7dfa88-f51a-4188-bd52-69e466605f", "record_id": "flaws_cloudtrail:0000364:8e7dfa88-f51a-4188-bd52-69e466605f", "row_index": 364, "timestamp": "2019-04-12T03:54:23Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 926, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e7dfa88-f51a-4188-bd52-69e466605f", "eventTime": "2019-04-12T03:54:23Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:us-east-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "197e20a1-1c4c-41f8-a9d8-0d684bc1370a", "record_id": "flaws_cloudtrail:0000365:197e20a1-1c4c-41f8-a9d8-0d684bc1370a", "row_index": 365, "timestamp": "2019-04-12T03:54:23Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 927, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "197e20a1-1c4c-41f8-a9d8-0d684bc1370a", "eventTime": "2019-04-12T03:54:23Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:us-east-2:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "380cdbf0-6e10-42ee-a499-cf9591e2027b", "record_id": "flaws_cloudtrail:0000366:380cdbf0-6e10-42ee-a499-cf9591e2027b", "row_index": 366, "timestamp": "2019-04-12T03:54:23Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 928, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "380cdbf0-6e10-42ee-a499-cf9591e2027b", "eventTime": "2019-04-12T03:54:23Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:us-west-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83ba2e54-9044-46d6-b059-f3b53eea0f31", "record_id": "flaws_cloudtrail:0000367:83ba2e54-9044-46d6-b059-f3b53eea0f31", "row_index": 367, "timestamp": "2019-04-12T03:54:23Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 928, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83ba2e54-9044-46d6-b059-f3b53eea0f31", "eventTime": "2019-04-12T03:54:23Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:us-west-2:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20677-646f-46d8-97ae-094c21b5e3be", "record_id": "flaws_cloudtrail:0000368:20677-646f-46d8-97ae-094c21b5e3be", "row_index": 368, "timestamp": "2019-04-12T03:54:23Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 930, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20677-646f-46d8-97ae-094c21b5e3be", "eventTime": "2019-04-12T03:54:23Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:ap-southeast-2:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7ee623f-6c08-4fdc-b660-62c81faca320", "record_id": "flaws_cloudtrail:0000369:d7ee623f-6c08-4fdc-b660-62c81faca320", "row_index": 369, "timestamp": "2019-04-12T03:54:23Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 933, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7ee623f-6c08-4fdc-b660-62c81faca320", "eventTime": "2019-04-12T03:54:23Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:eu-central-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "684145f25-c6be-4c36-b619-36b82fe684812", "record_id": "flaws_cloudtrail:0000370:684145f25-c6be-4c36-b619-36b82fe684812", "row_index": 370, "timestamp": "2019-04-12T03:54:23Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 929, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "684145f25-c6be-4c36-b619-36b82fe684812", "eventTime": "2019-04-12T03:54:23Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:eu-west-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed67df68-545a-4c30-8b4f-fe55aea4d067", "record_id": "flaws_cloudtrail:0000371:ed67df68-545a-4c30-8b4f-fe55aea4d067", "row_index": 371, "timestamp": "2019-04-12T03:54:23Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 927, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed67df68-545a-4c30-8b4f-fe55aea4d067", "eventTime": "2019-04-12T03:54:23Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:eu-west-2:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e7dfa88-f51a-4188-bd52-69e466605f", "record_id": "flaws_cloudtrail:0000372:8e7dfa88-f51a-4188-bd52-69e466605f", "row_index": 372, "timestamp": "2019-04-12T03:54:23Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 926, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e7dfa88-f51a-4188-bd52-69e466605f", "eventTime": "2019-04-12T03:54:23Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:us-east-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "197e20a1-1c4c-41f8-a9d8-0d684bc1370a", "record_id": "flaws_cloudtrail:0000373:197e20a1-1c4c-41f8-a9d8-0d684bc1370a", "row_index": 373, "timestamp": "2019-04-12T03:54:23Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 927, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "197e20a1-1c4c-41f8-a9d8-0d684bc1370a", "eventTime": "2019-04-12T03:54:23Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:us-east-2:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "380cdbf0-6e10-42ee-a499-cf9591e2027b", "record_id": "flaws_cloudtrail:0000374:380cdbf0-6e10-42ee-a499-cf9591e2027b", "row_index": 374, "timestamp": "2019-04-12T03:54:23Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 928, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "380cdbf0-6e10-42ee-a499-cf9591e2027b", "eventTime": "2019-04-12T03:54:23Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:us-west-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83ba2e54-9044-46d6-b059-f3b53eea0f31", "record_id": "flaws_cloudtrail:0000375:83ba2e54-9044-46d6-b059-f3b53eea0f31", "row_index": 375, "timestamp": "2019-04-12T03:54:23Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 928, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83ba2e54-9044-46d6-b059-f3b53eea0f31", "eventTime": "2019-04-12T03:54:23Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:us-west-2:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d80373-4d0c-474c-b7b5-95b2b302a20f", "record_id": "flaws_cloudtrail:0000376:4d80373-4d0c-474c-b7b5-95b2b302a20f", "row_index": 376, "timestamp": "2019-04-12T03:54:26Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 865, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d80373-4d0c-474c-b7b5-95b2b302a20f", "eventTime": "2019-04-12T03:54:26Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b205d0d5-98f7-4555-8a92-c0732aed1078", "record_id": "flaws_cloudtrail:0000377:b205d0d5-98f7-4555-8a92-c0732aed1078", "row_index": 377, "timestamp": "2019-04-12T03:54:26Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b205d0d5-98f7-4555-8a92-c0732aed1078", "eventTime": "2019-04-12T03:54:26Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78f7030b-6a92-44ca-90ae-f6e086dd0ded", "record_id": "flaws_cloudtrail:0000378:78f7030b-6a92-44ca-90ae-f6e086dd0ded", "row_index": 378, "timestamp": "2019-04-12T03:54:26Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78f7030b-6a92-44ca-90ae-f6e086dd0ded", "eventTime": "2019-04-12T03:54:26Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d80373-4d0c-474c-b7b5-95b2b302a20f", "record_id": "flaws_cloudtrail:0000379:4d80373-4d0c-474c-b7b5-95b2b302a20f", "row_index": 379, "timestamp": "2019-04-12T03:54:26Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 865, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d80373-4d0c-474c-b7b5-95b2b302a20f", "eventTime": "2019-04-12T03:54:26Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b205d0d5-98f7-4555-8a92-c0732aed1078", "record_id": "flaws_cloudtrail:0000380:b205d0d5-98f7-4555-8a92-c0732aed1078", "row_index": 380, "timestamp": "2019-04-12T03:54:26Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b205d0d5-98f7-4555-8a92-c0732aed1078", "eventTime": "2019-04-12T03:54:26Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78f7030b-6a92-44ca-90ae-f6e086dd0ded", "record_id": "flaws_cloudtrail:0000381:78f7030b-6a92-44ca-90ae-f6e086dd0ded", "row_index": 381, "timestamp": "2019-04-12T03:54:26Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78f7030b-6a92-44ca-90ae-f6e086dd0ded", "eventTime": "2019-04-12T03:54:26Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d27b1786-18db-475b-ac01-283a29e972e2", "record_id": "flaws_cloudtrail:0000382:d27b1786-18db-475b-ac01-283a29e972e2", "row_index": 382, "timestamp": "2019-04-12T03:54:27Z", "event_type": "DescribeSSLPolicies", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d27b1786-18db-475b-ac01-283a29e972e2", "eventTime": "2019-04-12T03:54:27Z", "eventName": "DescribeSSLPolicies", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeSSLPolicies", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eee1d88b-a510-4a08-be50-f7c45ad55a70", "record_id": "flaws_cloudtrail:0000383:eee1d88b-a510-4a08-be50-f7c45ad55a70", "row_index": 383, "timestamp": "2019-04-12T03:54:27Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eee1d88b-a510-4a08-be50-f7c45ad55a70", "eventTime": "2019-04-12T03:54:27Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ea115c9-022f-44e0-a83d-f02cadbf3ee8", "record_id": "flaws_cloudtrail:0000384:4ea115c9-022f-44e0-a83d-f02cadbf3ee8", "row_index": 384, "timestamp": "2019-04-12T03:54:27Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ea115c9-022f-44e0-a83d-f02cadbf3ee8", "eventTime": "2019-04-12T03:54:27Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "867625dbd-8a25-42c9-a1cd-2025f635e2da", "record_id": "flaws_cloudtrail:0000385:867625dbd-8a25-42c9-a1cd-2025f635e2da", "row_index": 385, "timestamp": "2019-04-12T03:54:27Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "867625dbd-8a25-42c9-a1cd-2025f635e2da", "eventTime": "2019-04-12T03:54:27Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec242cfe-607b-4988-a14a-5961bd63205a", "record_id": "flaws_cloudtrail:0000386:ec242cfe-607b-4988-a14a-5961bd63205a", "row_index": 386, "timestamp": "2019-04-12T03:54:27Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 865, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec242cfe-607b-4988-a14a-5961bd63205a", "eventTime": "2019-04-12T03:54:27Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7665c82-333e-49c5-80f3-3ab0c5ca472c", "record_id": "flaws_cloudtrail:0000387:c7665c82-333e-49c5-80f3-3ab0c5ca472c", "row_index": 387, "timestamp": "2019-04-12T03:54:27Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7665c82-333e-49c5-80f3-3ab0c5ca472c", "eventTime": "2019-04-12T03:54:27Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33304bb-11c2-4d00-9acb-27a8ad0fbaf1", "record_id": "flaws_cloudtrail:0000388:33304bb-11c2-4d00-9acb-27a8ad0fbaf1", "row_index": 388, "timestamp": "2019-04-12T03:54:27Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33304bb-11c2-4d00-9acb-27a8ad0fbaf1", "eventTime": "2019-04-12T03:54:27Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98abaf2c-892d-4548-bec2-c38ac943b061", "record_id": "flaws_cloudtrail:0000389:98abaf2c-892d-4548-bec2-c38ac943b061", "row_index": 389, "timestamp": "2019-04-12T03:54:27Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98abaf2c-892d-4548-bec2-c38ac943b061", "eventTime": "2019-04-12T03:54:27Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d62d33aa-63c8-4a77-b610-2b151577caa41", "record_id": "flaws_cloudtrail:0000390:d62d33aa-63c8-4a77-b610-2b151577caa41", "row_index": 390, "timestamp": "2019-04-12T03:54:27Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d62d33aa-63c8-4a77-b610-2b151577caa41", "eventTime": "2019-04-12T03:54:27Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d27b1786-18db-475b-ac01-283a29e972e2", "record_id": "flaws_cloudtrail:0000391:d27b1786-18db-475b-ac01-283a29e972e2", "row_index": 391, "timestamp": "2019-04-12T03:54:27Z", "event_type": "DescribeSSLPolicies", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d27b1786-18db-475b-ac01-283a29e972e2", "eventTime": "2019-04-12T03:54:27Z", "eventName": "DescribeSSLPolicies", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeSSLPolicies", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eee1d88b-a510-4a08-be50-f7c45ad55a70", "record_id": "flaws_cloudtrail:0000392:eee1d88b-a510-4a08-be50-f7c45ad55a70", "row_index": 392, "timestamp": "2019-04-12T03:54:27Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eee1d88b-a510-4a08-be50-f7c45ad55a70", "eventTime": "2019-04-12T03:54:27Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ea115c9-022f-44e0-a83d-f02cadbf3ee8", "record_id": "flaws_cloudtrail:0000393:4ea115c9-022f-44e0-a83d-f02cadbf3ee8", "row_index": 393, "timestamp": "2019-04-12T03:54:27Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ea115c9-022f-44e0-a83d-f02cadbf3ee8", "eventTime": "2019-04-12T03:54:27Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "867625dbd-8a25-42c9-a1cd-2025f635e2da", "record_id": "flaws_cloudtrail:0000394:867625dbd-8a25-42c9-a1cd-2025f635e2da", "row_index": 394, "timestamp": "2019-04-12T03:54:27Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "867625dbd-8a25-42c9-a1cd-2025f635e2da", "eventTime": "2019-04-12T03:54:27Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec242cfe-607b-4988-a14a-5961bd63205a", "record_id": "flaws_cloudtrail:0000395:ec242cfe-607b-4988-a14a-5961bd63205a", "row_index": 395, "timestamp": "2019-04-12T03:54:27Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 865, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec242cfe-607b-4988-a14a-5961bd63205a", "eventTime": "2019-04-12T03:54:27Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7665c82-333e-49c5-80f3-3ab0c5ca472c", "record_id": "flaws_cloudtrail:0000396:c7665c82-333e-49c5-80f3-3ab0c5ca472c", "row_index": 396, "timestamp": "2019-04-12T03:54:27Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7665c82-333e-49c5-80f3-3ab0c5ca472c", "eventTime": "2019-04-12T03:54:27Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33304bb-11c2-4d00-9acb-27a8ad0fbaf1", "record_id": "flaws_cloudtrail:0000397:33304bb-11c2-4d00-9acb-27a8ad0fbaf1", "row_index": 397, "timestamp": "2019-04-12T03:54:27Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33304bb-11c2-4d00-9acb-27a8ad0fbaf1", "eventTime": "2019-04-12T03:54:27Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98abaf2c-892d-4548-bec2-c38ac943b061", "record_id": "flaws_cloudtrail:0000398:98abaf2c-892d-4548-bec2-c38ac943b061", "row_index": 398, "timestamp": "2019-04-12T03:54:27Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98abaf2c-892d-4548-bec2-c38ac943b061", "eventTime": "2019-04-12T03:54:27Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d62d33aa-63c8-4a77-b610-2b151577caa41", "record_id": "flaws_cloudtrail:0000399:d62d33aa-63c8-4a77-b610-2b151577caa41", "row_index": 399, "timestamp": "2019-04-12T03:54:27Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d62d33aa-63c8-4a77-b610-2b151577caa41", "eventTime": "2019-04-12T03:54:27Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95b29ea7-bda2-4f8c-afcc-bb52aa89c42e", "record_id": "flaws_cloudtrail:0000400:95b29ea7-bda2-4f8c-afcc-bb52aa89c42e", "row_index": 400, "timestamp": "2019-04-12T03:54:28Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95b29ea7-bda2-4f8c-afcc-bb52aa89c42e", "eventTime": "2019-04-12T03:54:28Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fabfa24e-16c4-4172-a528-6904a55121c0", "record_id": "flaws_cloudtrail:0000401:fabfa24e-16c4-4172-a528-6904a55121c0", "row_index": 401, "timestamp": "2019-04-12T03:54:28Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fabfa24e-16c4-4172-a528-6904a55121c0", "eventTime": "2019-04-12T03:54:28Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08a58952-cba5-4b5e-9b58-d7e8e10adf7b", "record_id": "flaws_cloudtrail:0000402:08a58952-cba5-4b5e-9b58-d7e8e10adf7b", "row_index": 402, "timestamp": "2019-04-12T03:54:28Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08a58952-cba5-4b5e-9b58-d7e8e10adf7b", "eventTime": "2019-04-12T03:54:28Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34874e4d-79db-4ac2-aa0a-272e74b95457", "record_id": "flaws_cloudtrail:0000403:34874e4d-79db-4ac2-aa0a-272e74b95457", "row_index": 403, "timestamp": "2019-04-12T03:54:28Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34874e4d-79db-4ac2-aa0a-272e74b95457", "eventTime": "2019-04-12T03:54:28Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5ef8435-a7ec-46c5-a4ed-225bdf6e4c67", "record_id": "flaws_cloudtrail:0000404:e5ef8435-a7ec-46c5-a4ed-225bdf6e4c67", "row_index": 404, "timestamp": "2019-04-12T03:54:28Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5ef8435-a7ec-46c5-a4ed-225bdf6e4c67", "eventTime": "2019-04-12T03:54:28Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95b29ea7-bda2-4f8c-afcc-bb52aa89c42e", "record_id": "flaws_cloudtrail:0000405:95b29ea7-bda2-4f8c-afcc-bb52aa89c42e", "row_index": 405, "timestamp": "2019-04-12T03:54:28Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95b29ea7-bda2-4f8c-afcc-bb52aa89c42e", "eventTime": "2019-04-12T03:54:28Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fabfa24e-16c4-4172-a528-6904a55121c0", "record_id": "flaws_cloudtrail:0000406:fabfa24e-16c4-4172-a528-6904a55121c0", "row_index": 406, "timestamp": "2019-04-12T03:54:28Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fabfa24e-16c4-4172-a528-6904a55121c0", "eventTime": "2019-04-12T03:54:28Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08a58952-cba5-4b5e-9b58-d7e8e10adf7b", "record_id": "flaws_cloudtrail:0000407:08a58952-cba5-4b5e-9b58-d7e8e10adf7b", "row_index": 407, "timestamp": "2019-04-12T03:54:28Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08a58952-cba5-4b5e-9b58-d7e8e10adf7b", "eventTime": "2019-04-12T03:54:28Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34874e4d-79db-4ac2-aa0a-272e74b95457", "record_id": "flaws_cloudtrail:0000408:34874e4d-79db-4ac2-aa0a-272e74b95457", "row_index": 408, "timestamp": "2019-04-12T03:54:28Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34874e4d-79db-4ac2-aa0a-272e74b95457", "eventTime": "2019-04-12T03:54:28Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5ef8435-a7ec-46c5-a4ed-225bdf6e4c67", "record_id": "flaws_cloudtrail:0000409:e5ef8435-a7ec-46c5-a4ed-225bdf6e4c67", "row_index": 409, "timestamp": "2019-04-12T03:54:28Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5ef8435-a7ec-46c5-a4ed-225bdf6e4c67", "eventTime": "2019-04-12T03:54:28Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72d59dcd-5cec-42b4-93cc-523a0d659f30", "record_id": "flaws_cloudtrail:0000410:72d59dcd-5cec-42b4-93cc-523a0d659f30", "row_index": 410, "timestamp": "2019-04-12T03:54:31Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 900, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72d59dcd-5cec-42b4-93cc-523a0d659f30", "eventTime": "2019-04-12T03:54:31Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ap-northeast-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d89a0fca-7a47-4ee1-a28d-92ca5f8108a4", "record_id": "flaws_cloudtrail:0000411:d89a0fca-7a47-4ee1-a28d-92ca5f8108a4", "row_index": 411, "timestamp": "2019-04-12T03:54:31Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 900, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d89a0fca-7a47-4ee1-a28d-92ca5f8108a4", "eventTime": "2019-04-12T03:54:31Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ap-northeast-2:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b746e8e5-69e1-43d8-92bb-fb4fab31b650", "record_id": "flaws_cloudtrail:0000412:b746e8e5-69e1-43d8-92bb-fb4fab31b650", "row_index": 412, "timestamp": "2019-04-12T03:54:31Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 893, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b746e8e5-69e1-43d8-92bb-fb4fab31b650", "eventTime": "2019-04-12T03:54:31Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ap-south-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "775c5524-3bbf-4c34-bf87-4bcad089706fd", "record_id": "flaws_cloudtrail:0000413:775c5524-3bbf-4c34-bf87-4bcad089706fd", "row_index": 413, "timestamp": "2019-04-12T03:54:31Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 901, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "775c5524-3bbf-4c34-bf87-4bcad089706fd", "eventTime": "2019-04-12T03:54:31Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ap-southeast-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9fdd7aed-b338-4a04-98b4-eecab424761b6", "record_id": "flaws_cloudtrail:0000414:9fdd7aed-b338-4a04-98b4-eecab424761b6", "row_index": 414, "timestamp": "2019-04-12T03:54:31Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 901, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9fdd7aed-b338-4a04-98b4-eecab424761b6", "eventTime": "2019-04-12T03:54:31Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ap-southeast-2:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72d59dcd-5cec-42b4-93cc-523a0d659f30", "record_id": "flaws_cloudtrail:0000415:72d59dcd-5cec-42b4-93cc-523a0d659f30", "row_index": 415, "timestamp": "2019-04-12T03:54:31Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 900, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72d59dcd-5cec-42b4-93cc-523a0d659f30", "eventTime": "2019-04-12T03:54:31Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ap-northeast-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d89a0fca-7a47-4ee1-a28d-92ca5f8108a4", "record_id": "flaws_cloudtrail:0000416:d89a0fca-7a47-4ee1-a28d-92ca5f8108a4", "row_index": 416, "timestamp": "2019-04-12T03:54:31Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 900, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d89a0fca-7a47-4ee1-a28d-92ca5f8108a4", "eventTime": "2019-04-12T03:54:31Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ap-northeast-2:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b746e8e5-69e1-43d8-92bb-fb4fab31b650", "record_id": "flaws_cloudtrail:0000417:b746e8e5-69e1-43d8-92bb-fb4fab31b650", "row_index": 417, "timestamp": "2019-04-12T03:54:31Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 893, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b746e8e5-69e1-43d8-92bb-fb4fab31b650", "eventTime": "2019-04-12T03:54:31Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ap-south-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "775c5524-3bbf-4c34-bf87-4bcad089706fd", "record_id": "flaws_cloudtrail:0000418:775c5524-3bbf-4c34-bf87-4bcad089706fd", "row_index": 418, "timestamp": "2019-04-12T03:54:31Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 901, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "775c5524-3bbf-4c34-bf87-4bcad089706fd", "eventTime": "2019-04-12T03:54:31Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ap-southeast-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9fdd7aed-b338-4a04-98b4-eecab424761b6", "record_id": "flaws_cloudtrail:0000419:9fdd7aed-b338-4a04-98b4-eecab424761b6", "row_index": 419, "timestamp": "2019-04-12T03:54:31Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 901, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9fdd7aed-b338-4a04-98b4-eecab424761b6", "eventTime": "2019-04-12T03:54:31Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ap-southeast-2:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9eadc47a-456c-46bf-bef7-971b5ffbc7d4", "record_id": "flaws_cloudtrail:0000420:9eadc47a-456c-46bf-bef7-971b5ffbc7d4", "row_index": 420, "timestamp": "2019-04-12T03:54:32Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 896, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9eadc47a-456c-46bf-bef7-971b5ffbc7d4", "eventTime": "2019-04-12T03:54:32Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ca-central-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b32261-87f4-4296-8a86-7e50feee0c14", "record_id": "flaws_cloudtrail:0000421:b32261-87f4-4296-8a86-7e50feee0c14", "row_index": 421, "timestamp": "2019-04-12T03:54:32Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b32261-87f4-4296-8a86-7e50feee0c14", "eventTime": "2019-04-12T03:54:32Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:eu-central-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0fae8a3e-7ba7-4bff-b6ac-a60c952934f7", "record_id": "flaws_cloudtrail:0000422:0fae8a3e-7ba7-4bff-b6ac-a60c952934f7", "row_index": 422, "timestamp": "2019-04-12T03:54:32Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 890, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0fae8a3e-7ba7-4bff-b6ac-a60c952934f7", "eventTime": "2019-04-12T03:54:32Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:eu-west-2:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9eadc47a-456c-46bf-bef7-971b5ffbc7d4", "record_id": "flaws_cloudtrail:0000423:9eadc47a-456c-46bf-bef7-971b5ffbc7d4", "row_index": 423, "timestamp": "2019-04-12T03:54:32Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 896, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9eadc47a-456c-46bf-bef7-971b5ffbc7d4", "eventTime": "2019-04-12T03:54:32Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ca-central-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b32261-87f4-4296-8a86-7e50feee0c14", "record_id": "flaws_cloudtrail:0000424:b32261-87f4-4296-8a86-7e50feee0c14", "row_index": 424, "timestamp": "2019-04-12T03:54:32Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b32261-87f4-4296-8a86-7e50feee0c14", "eventTime": "2019-04-12T03:54:32Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:eu-central-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0fae8a3e-7ba7-4bff-b6ac-a60c952934f7", "record_id": "flaws_cloudtrail:0000425:0fae8a3e-7ba7-4bff-b6ac-a60c952934f7", "row_index": 425, "timestamp": "2019-04-12T03:54:32Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 890, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0fae8a3e-7ba7-4bff-b6ac-a60c952934f7", "eventTime": "2019-04-12T03:54:32Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:eu-west-2:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3b3f833-5156-43f0-b41a-b59a8dcd5f6a", "record_id": "flaws_cloudtrail:0000426:c3b3f833-5156-43f0-b41a-b59a8dcd5f6a", "row_index": 426, "timestamp": "2019-04-12T03:54:33Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 892, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3b3f833-5156-43f0-b41a-b59a8dcd5f6a", "eventTime": "2019-04-12T03:54:33Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:eu-north-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a40ff8c0-e1b9-47c1-88bf-9ea1d4a227ec", "record_id": "flaws_cloudtrail:0000427:a40ff8c0-e1b9-47c1-88bf-9ea1d4a227ec", "row_index": 427, "timestamp": "2019-04-12T03:54:33Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 890, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a40ff8c0-e1b9-47c1-88bf-9ea1d4a227ec", "eventTime": "2019-04-12T03:54:33Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:eu-west-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a1e2cd7-26f8-48ec-a306-ea4c9ba10587", "record_id": "flaws_cloudtrail:0000428:1a1e2cd7-26f8-48ec-a306-ea4c9ba10587", "row_index": 428, "timestamp": "2019-04-12T03:54:33Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 890, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a1e2cd7-26f8-48ec-a306-ea4c9ba10587", "eventTime": "2019-04-12T03:54:33Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:eu-west-3:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3b3f833-5156-43f0-b41a-b59a8dcd5f6a", "record_id": "flaws_cloudtrail:0000429:c3b3f833-5156-43f0-b41a-b59a8dcd5f6a", "row_index": 429, "timestamp": "2019-04-12T03:54:33Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 892, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3b3f833-5156-43f0-b41a-b59a8dcd5f6a", "eventTime": "2019-04-12T03:54:33Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:eu-north-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a40ff8c0-e1b9-47c1-88bf-9ea1d4a227ec", "record_id": "flaws_cloudtrail:0000430:a40ff8c0-e1b9-47c1-88bf-9ea1d4a227ec", "row_index": 430, "timestamp": "2019-04-12T03:54:33Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 890, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a40ff8c0-e1b9-47c1-88bf-9ea1d4a227ec", "eventTime": "2019-04-12T03:54:33Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:eu-west-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a1e2cd7-26f8-48ec-a306-ea4c9ba10587", "record_id": "flaws_cloudtrail:0000431:1a1e2cd7-26f8-48ec-a306-ea4c9ba10587", "row_index": 431, "timestamp": "2019-04-12T03:54:33Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 890, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a1e2cd7-26f8-48ec-a306-ea4c9ba10587", "eventTime": "2019-04-12T03:54:33Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:eu-west-3:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac9103b0-44f6-4fcf-a86d-2f3a80979e6f", "record_id": "flaws_cloudtrail:0000432:ac9103b0-44f6-4fcf-a86d-2f3a80979e6f", "row_index": 432, "timestamp": "2019-04-12T03:54:34Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 890, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac9103b0-44f6-4fcf-a86d-2f3a80979e6f", "eventTime": "2019-04-12T03:54:34Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:us-east-2:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aaae8550-62ff-4eef-a17d-2d0cc44ce50d", "record_id": "flaws_cloudtrail:0000433:aaae8550-62ff-4eef-a17d-2d0cc44ce50d", "row_index": 433, "timestamp": "2019-04-12T03:54:34Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 890, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aaae8550-62ff-4eef-a17d-2d0cc44ce50d", "eventTime": "2019-04-12T03:54:34Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:us-west-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce83208-ac05-4da1-b88c-8e54421d2b3e", "record_id": "flaws_cloudtrail:0000434:ce83208-ac05-4da1-b88c-8e54421d2b3e", "row_index": 434, "timestamp": "2019-04-12T03:54:34Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 890, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce83208-ac05-4da1-b88c-8e54421d2b3e", "eventTime": "2019-04-12T03:54:34Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:us-west-2:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac9103b0-44f6-4fcf-a86d-2f3a80979e6f", "record_id": "flaws_cloudtrail:0000435:ac9103b0-44f6-4fcf-a86d-2f3a80979e6f", "row_index": 435, "timestamp": "2019-04-12T03:54:34Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 890, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac9103b0-44f6-4fcf-a86d-2f3a80979e6f", "eventTime": "2019-04-12T03:54:34Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:us-east-2:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aaae8550-62ff-4eef-a17d-2d0cc44ce50d", "record_id": "flaws_cloudtrail:0000436:aaae8550-62ff-4eef-a17d-2d0cc44ce50d", "row_index": 436, "timestamp": "2019-04-12T03:54:34Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 890, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aaae8550-62ff-4eef-a17d-2d0cc44ce50d", "eventTime": "2019-04-12T03:54:34Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:us-west-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce83208-ac05-4da1-b88c-8e54421d2b3e", "record_id": "flaws_cloudtrail:0000437:ce83208-ac05-4da1-b88c-8e54421d2b3e", "row_index": 437, "timestamp": "2019-04-12T03:54:34Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 890, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce83208-ac05-4da1-b88c-8e54421d2b3e", "eventTime": "2019-04-12T03:54:34Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:us-west-2:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87e3f493-e36c-4ec0-a388-3cb8fd3f4702", "record_id": "flaws_cloudtrail:0000438:87e3f493-e36c-4ec0-a388-3cb8fd3f4702", "row_index": 438, "timestamp": "2019-04-12T03:54:35Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 891, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87e3f493-e36c-4ec0-a388-3cb8fd3f4702", "eventTime": "2019-04-12T03:54:35Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:sa-east-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39a72bb5-b4de-4e41-afff-011e5d66f8c6", "record_id": "flaws_cloudtrail:0000439:39a72bb5-b4de-4e41-afff-011e5d66f8c6", "row_index": 439, "timestamp": "2019-04-12T03:54:35Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 890, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39a72bb5-b4de-4e41-afff-011e5d66f8c6", "eventTime": "2019-04-12T03:54:35Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:us-east-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87e3f493-e36c-4ec0-a388-3cb8fd3f4702", "record_id": "flaws_cloudtrail:0000440:87e3f493-e36c-4ec0-a388-3cb8fd3f4702", "row_index": 440, "timestamp": "2019-04-12T03:54:35Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 891, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87e3f493-e36c-4ec0-a388-3cb8fd3f4702", "eventTime": "2019-04-12T03:54:35Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:sa-east-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39a72bb5-b4de-4e41-afff-011e5d66f8c6", "record_id": "flaws_cloudtrail:0000441:39a72bb5-b4de-4e41-afff-011e5d66f8c6", "row_index": 441, "timestamp": "2019-04-12T03:54:35Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 890, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39a72bb5-b4de-4e41-afff-011e5d66f8c6", "eventTime": "2019-04-12T03:54:35Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:us-east-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "314446d6d-4a07-47db-8bfc-a822d9797428", "record_id": "flaws_cloudtrail:0000442:314446d6d-4a07-47db-8bfc-a822d9797428", "row_index": 442, "timestamp": "2019-04-12T03:54:38Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 844, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "314446d6d-4a07-47db-8bfc-a822d9797428", "eventTime": "2019-04-12T03:54:38Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42f5bbc8-c0f3-49ff-a1ba-594e4c881174", "record_id": "flaws_cloudtrail:0000443:42f5bbc8-c0f3-49ff-a1ba-594e4c881174", "row_index": 443, "timestamp": "2019-04-12T03:54:38Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42f5bbc8-c0f3-49ff-a1ba-594e4c881174", "eventTime": "2019-04-12T03:54:38Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5bae8b3e-36c3-4dfa-9e97-ce32b1c515c8", "record_id": "flaws_cloudtrail:0000444:5bae8b3e-36c3-4dfa-9e97-ce32b1c515c8", "row_index": 444, "timestamp": "2019-04-12T03:54:38Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5bae8b3e-36c3-4dfa-9e97-ce32b1c515c8", "eventTime": "2019-04-12T03:54:38Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8fc1f937-2532-470f-a8b0-e613a829a5d0", "record_id": "flaws_cloudtrail:0000445:8fc1f937-2532-470f-a8b0-e613a829a5d0", "row_index": 445, "timestamp": "2019-04-12T03:54:38Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8fc1f937-2532-470f-a8b0-e613a829a5d0", "eventTime": "2019-04-12T03:54:38Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4db3923b-f02a-4630-8c03-575711d52b1b", "record_id": "flaws_cloudtrail:0000446:4db3923b-f02a-4630-8c03-575711d52b1b", "row_index": 446, "timestamp": "2019-04-12T03:54:38Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4db3923b-f02a-4630-8c03-575711d52b1b", "eventTime": "2019-04-12T03:54:38Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ea9dba6-df75-404e-8399-129007b528ab", "record_id": "flaws_cloudtrail:0000447:6ea9dba6-df75-404e-8399-129007b528ab", "row_index": 447, "timestamp": "2019-04-12T03:54:38Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ea9dba6-df75-404e-8399-129007b528ab", "eventTime": "2019-04-12T03:54:38Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a172808-1df6-4fca-a200-60c5ea4ccdf0", "record_id": "flaws_cloudtrail:0000448:8a172808-1df6-4fca-a200-60c5ea4ccdf0", "row_index": 448, "timestamp": "2019-04-12T03:54:38Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a172808-1df6-4fca-a200-60c5ea4ccdf0", "eventTime": "2019-04-12T03:54:38Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "314446d6d-4a07-47db-8bfc-a822d9797428", "record_id": "flaws_cloudtrail:0000449:314446d6d-4a07-47db-8bfc-a822d9797428", "row_index": 449, "timestamp": "2019-04-12T03:54:38Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 844, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "314446d6d-4a07-47db-8bfc-a822d9797428", "eventTime": "2019-04-12T03:54:38Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42f5bbc8-c0f3-49ff-a1ba-594e4c881174", "record_id": "flaws_cloudtrail:0000450:42f5bbc8-c0f3-49ff-a1ba-594e4c881174", "row_index": 450, "timestamp": "2019-04-12T03:54:38Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42f5bbc8-c0f3-49ff-a1ba-594e4c881174", "eventTime": "2019-04-12T03:54:38Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5bae8b3e-36c3-4dfa-9e97-ce32b1c515c8", "record_id": "flaws_cloudtrail:0000451:5bae8b3e-36c3-4dfa-9e97-ce32b1c515c8", "row_index": 451, "timestamp": "2019-04-12T03:54:38Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5bae8b3e-36c3-4dfa-9e97-ce32b1c515c8", "eventTime": "2019-04-12T03:54:38Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8fc1f937-2532-470f-a8b0-e613a829a5d0", "record_id": "flaws_cloudtrail:0000452:8fc1f937-2532-470f-a8b0-e613a829a5d0", "row_index": 452, "timestamp": "2019-04-12T03:54:38Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8fc1f937-2532-470f-a8b0-e613a829a5d0", "eventTime": "2019-04-12T03:54:38Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4db3923b-f02a-4630-8c03-575711d52b1b", "record_id": "flaws_cloudtrail:0000453:4db3923b-f02a-4630-8c03-575711d52b1b", "row_index": 453, "timestamp": "2019-04-12T03:54:38Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4db3923b-f02a-4630-8c03-575711d52b1b", "eventTime": "2019-04-12T03:54:38Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ea9dba6-df75-404e-8399-129007b528ab", "record_id": "flaws_cloudtrail:0000454:6ea9dba6-df75-404e-8399-129007b528ab", "row_index": 454, "timestamp": "2019-04-12T03:54:38Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ea9dba6-df75-404e-8399-129007b528ab", "eventTime": "2019-04-12T03:54:38Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a172808-1df6-4fca-a200-60c5ea4ccdf0", "record_id": "flaws_cloudtrail:0000455:8a172808-1df6-4fca-a200-60c5ea4ccdf0", "row_index": 455, "timestamp": "2019-04-12T03:54:38Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a172808-1df6-4fca-a200-60c5ea4ccdf0", "eventTime": "2019-04-12T03:54:38Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52221cc2-47ef-4833-b8f6-01ef02b11a5f", "record_id": "flaws_cloudtrail:0000456:52221cc2-47ef-4833-b8f6-01ef02b11a5f", "row_index": 456, "timestamp": "2019-04-12T03:54:39Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52221cc2-47ef-4833-b8f6-01ef02b11a5f", "eventTime": "2019-04-12T03:54:39Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f78d0b0-f8ff-4d36-ae5c-111e4d33f6cd", "record_id": "flaws_cloudtrail:0000457:5f78d0b0-f8ff-4d36-ae5c-111e4d33f6cd", "row_index": 457, "timestamp": "2019-04-12T03:54:39Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 840, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f78d0b0-f8ff-4d36-ae5c-111e4d33f6cd", "eventTime": "2019-04-12T03:54:39Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52aae98a-bf99-47a0-bf69-3b5d9756b71e", "record_id": "flaws_cloudtrail:0000458:52aae98a-bf99-47a0-bf69-3b5d9756b71e", "row_index": 458, "timestamp": "2019-04-12T03:54:39Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52aae98a-bf99-47a0-bf69-3b5d9756b71e", "eventTime": "2019-04-12T03:54:39Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52221cc2-47ef-4833-b8f6-01ef02b11a5f", "record_id": "flaws_cloudtrail:0000459:52221cc2-47ef-4833-b8f6-01ef02b11a5f", "row_index": 459, "timestamp": "2019-04-12T03:54:39Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52221cc2-47ef-4833-b8f6-01ef02b11a5f", "eventTime": "2019-04-12T03:54:39Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f78d0b0-f8ff-4d36-ae5c-111e4d33f6cd", "record_id": "flaws_cloudtrail:0000460:5f78d0b0-f8ff-4d36-ae5c-111e4d33f6cd", "row_index": 460, "timestamp": "2019-04-12T03:54:39Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 840, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f78d0b0-f8ff-4d36-ae5c-111e4d33f6cd", "eventTime": "2019-04-12T03:54:39Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52aae98a-bf99-47a0-bf69-3b5d9756b71e", "record_id": "flaws_cloudtrail:0000461:52aae98a-bf99-47a0-bf69-3b5d9756b71e", "row_index": 461, "timestamp": "2019-04-12T03:54:39Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52aae98a-bf99-47a0-bf69-3b5d9756b71e", "eventTime": "2019-04-12T03:54:39Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d171a57d-9c30-4c50-b03d-a1190ae6b5cb", "record_id": "flaws_cloudtrail:0000462:d171a57d-9c30-4c50-b03d-a1190ae6b5cb", "row_index": 462, "timestamp": "2019-04-12T03:54:41Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d171a57d-9c30-4c50-b03d-a1190ae6b5cb", "eventTime": "2019-04-12T03:54:41Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "938c6f62-e440-4a17-9f0b-567a8c6c49bb", "record_id": "flaws_cloudtrail:0000463:938c6f62-e440-4a17-9f0b-567a8c6c49bb", "row_index": 463, "timestamp": "2019-04-12T03:54:41Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "938c6f62-e440-4a17-9f0b-567a8c6c49bb", "eventTime": "2019-04-12T03:54:41Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be53e485-ff93-4a49-91ba-dbc6fcfa0a32", "record_id": "flaws_cloudtrail:0000464:be53e485-ff93-4a49-91ba-dbc6fcfa0a32", "row_index": 464, "timestamp": "2019-04-12T03:54:41Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be53e485-ff93-4a49-91ba-dbc6fcfa0a32", "eventTime": "2019-04-12T03:54:41Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56ec9a0d-f956-4f50-81a0-44c659619e13a", "record_id": "flaws_cloudtrail:0000465:56ec9a0d-f956-4f50-81a0-44c659619e13a", "row_index": 465, "timestamp": "2019-04-12T03:54:41Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56ec9a0d-f956-4f50-81a0-44c659619e13a", "eventTime": "2019-04-12T03:54:41Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c97f03a0-2dc2-4d37-9a8b-c51befc56386", "record_id": "flaws_cloudtrail:0000466:c97f03a0-2dc2-4d37-9a8b-c51befc56386", "row_index": 466, "timestamp": "2019-04-12T03:54:41Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c97f03a0-2dc2-4d37-9a8b-c51befc56386", "eventTime": "2019-04-12T03:54:41Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70d05ea4-c0ad-4ffe-b27b-8c184c71b2b3", "record_id": "flaws_cloudtrail:0000467:70d05ea4-c0ad-4ffe-b27b-8c184c71b2b3", "row_index": 467, "timestamp": "2019-04-12T03:54:41Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70d05ea4-c0ad-4ffe-b27b-8c184c71b2b3", "eventTime": "2019-04-12T03:54:41Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d171a57d-9c30-4c50-b03d-a1190ae6b5cb", "record_id": "flaws_cloudtrail:0000468:d171a57d-9c30-4c50-b03d-a1190ae6b5cb", "row_index": 468, "timestamp": "2019-04-12T03:54:41Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d171a57d-9c30-4c50-b03d-a1190ae6b5cb", "eventTime": "2019-04-12T03:54:41Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "938c6f62-e440-4a17-9f0b-567a8c6c49bb", "record_id": "flaws_cloudtrail:0000469:938c6f62-e440-4a17-9f0b-567a8c6c49bb", "row_index": 469, "timestamp": "2019-04-12T03:54:41Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "938c6f62-e440-4a17-9f0b-567a8c6c49bb", "eventTime": "2019-04-12T03:54:41Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be53e485-ff93-4a49-91ba-dbc6fcfa0a32", "record_id": "flaws_cloudtrail:0000470:be53e485-ff93-4a49-91ba-dbc6fcfa0a32", "row_index": 470, "timestamp": "2019-04-12T03:54:41Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be53e485-ff93-4a49-91ba-dbc6fcfa0a32", "eventTime": "2019-04-12T03:54:41Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56ec9a0d-f956-4f50-81a0-44c659619e13a", "record_id": "flaws_cloudtrail:0000471:56ec9a0d-f956-4f50-81a0-44c659619e13a", "row_index": 471, "timestamp": "2019-04-12T03:54:41Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56ec9a0d-f956-4f50-81a0-44c659619e13a", "eventTime": "2019-04-12T03:54:41Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c97f03a0-2dc2-4d37-9a8b-c51befc56386", "record_id": "flaws_cloudtrail:0000472:c97f03a0-2dc2-4d37-9a8b-c51befc56386", "row_index": 472, "timestamp": "2019-04-12T03:54:41Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c97f03a0-2dc2-4d37-9a8b-c51befc56386", "eventTime": "2019-04-12T03:54:41Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70d05ea4-c0ad-4ffe-b27b-8c184c71b2b3", "record_id": "flaws_cloudtrail:0000473:70d05ea4-c0ad-4ffe-b27b-8c184c71b2b3", "row_index": 473, "timestamp": "2019-04-12T03:54:41Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70d05ea4-c0ad-4ffe-b27b-8c184c71b2b3", "eventTime": "2019-04-12T03:54:41Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5f17232-9a27-4dde-9e37-8e17290f40b", "record_id": "flaws_cloudtrail:0000474:d5f17232-9a27-4dde-9e37-8e17290f40b", "row_index": 474, "timestamp": "2019-04-12T03:54:45Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5f17232-9a27-4dde-9e37-8e17290f40b", "eventTime": "2019-04-12T03:54:45Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d9b06a1-c0d8-4684-aedd-ea45a1e8288d", "record_id": "flaws_cloudtrail:0000475:8d9b06a1-c0d8-4684-aedd-ea45a1e8288d", "row_index": 475, "timestamp": "2019-04-12T03:54:45Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 898, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d9b06a1-c0d8-4684-aedd-ea45a1e8288d", "eventTime": "2019-04-12T03:54:45Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:ap-southeast-1:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c22d0d6-ebb4-4235-a549-398049a0f338", "record_id": "flaws_cloudtrail:0000476:5c22d0d6-ebb4-4235-a549-398049a0f338", "row_index": 476, "timestamp": "2019-04-12T03:54:45Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 873, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c22d0d6-ebb4-4235-a549-398049a0f338", "eventTime": "2019-04-12T03:54:45Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5f17232-9a27-4dde-9e37-8e17290f40b", "record_id": "flaws_cloudtrail:0000477:d5f17232-9a27-4dde-9e37-8e17290f40b", "row_index": 477, "timestamp": "2019-04-12T03:54:45Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5f17232-9a27-4dde-9e37-8e17290f40b", "eventTime": "2019-04-12T03:54:45Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d9b06a1-c0d8-4684-aedd-ea45a1e8288d", "record_id": "flaws_cloudtrail:0000478:8d9b06a1-c0d8-4684-aedd-ea45a1e8288d", "row_index": 478, "timestamp": "2019-04-12T03:54:45Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 898, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d9b06a1-c0d8-4684-aedd-ea45a1e8288d", "eventTime": "2019-04-12T03:54:45Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:ap-southeast-1:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c22d0d6-ebb4-4235-a549-398049a0f338", "record_id": "flaws_cloudtrail:0000479:5c22d0d6-ebb4-4235-a549-398049a0f338", "row_index": 479, "timestamp": "2019-04-12T03:54:45Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 873, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c22d0d6-ebb4-4235-a549-398049a0f338", "eventTime": "2019-04-12T03:54:45Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58cd3572-0076-4308-98a0-d186df9aa0e2", "record_id": "flaws_cloudtrail:0000480:58cd3572-0076-4308-98a0-d186df9aa0e2", "row_index": 480, "timestamp": "2019-04-12T03:54:46Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 874, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58cd3572-0076-4308-98a0-d186df9aa0e2", "eventTime": "2019-04-12T03:54:46Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fea8592-ef33-4259-a2aa-1f61c18a2610", "record_id": "flaws_cloudtrail:0000481:3fea8592-ef33-4259-a2aa-1f61c18a2610", "row_index": 481, "timestamp": "2019-04-12T03:54:46Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 873, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fea8592-ef33-4259-a2aa-1f61c18a2610", "eventTime": "2019-04-12T03:54:46Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e78c2f45-a7b2-427e-b4fe-d8c497ff6949", "record_id": "flaws_cloudtrail:0000482:e78c2f45-a7b2-427e-b4fe-d8c497ff6949", "row_index": 482, "timestamp": "2019-04-12T03:54:46Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 900, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e78c2f45-a7b2-427e-b4fe-d8c497ff6949", "eventTime": "2019-04-12T03:54:46Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:ap-northeast-1:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "525048c88-2c3b-4beb-8ed4-13276f8", "record_id": "flaws_cloudtrail:0000483:525048c88-2c3b-4beb-8ed4-13276f8", "row_index": 483, "timestamp": "2019-04-12T03:54:46Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 869, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "525048c88-2c3b-4beb-8ed4-13276f8", "eventTime": "2019-04-12T03:54:46Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a2281b7-50d6-46ba-a1b9-5dfd2aeb39ae", "record_id": "flaws_cloudtrail:0000484:4a2281b7-50d6-46ba-a1b9-5dfd2aeb39ae", "row_index": 484, "timestamp": "2019-04-12T03:54:46Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 900, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a2281b7-50d6-46ba-a1b9-5dfd2aeb39ae", "eventTime": "2019-04-12T03:54:46Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:ap-northeast-2:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b209f2d-de28-479e-889a-208be5bf3c3d", "record_id": "flaws_cloudtrail:0000485:6b209f2d-de28-479e-889a-208be5bf3c3d", "row_index": 485, "timestamp": "2019-04-12T03:54:46Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 875, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b209f2d-de28-479e-889a-208be5bf3c3d", "eventTime": "2019-04-12T03:54:46Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c82069-cfe8-419c-aa77-02f37e065a09", "record_id": "flaws_cloudtrail:0000486:c82069-cfe8-419c-aa77-02f37e065a09", "row_index": 486, "timestamp": "2019-04-12T03:54:46Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c82069-cfe8-419c-aa77-02f37e065a09", "eventTime": "2019-04-12T03:54:46Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "841168-3df6-442a-9fd1-e9883f42c097", "record_id": "flaws_cloudtrail:0000487:841168-3df6-442a-9fd1-e9883f42c097", "row_index": 487, "timestamp": "2019-04-12T03:54:46Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "841168-3df6-442a-9fd1-e9883f42c097", "eventTime": "2019-04-12T03:54:46Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40dc0087-4240-4f09-80e8-5f21397f86a3", "record_id": "flaws_cloudtrail:0000488:40dc0087-4240-4f09-80e8-5f21397f86a3", "row_index": 488, "timestamp": "2019-04-12T03:54:46Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 893, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40dc0087-4240-4f09-80e8-5f21397f86a3", "eventTime": "2019-04-12T03:54:46Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:ap-south-1:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af0d3097-ca4e-423c-986a-f26678cedd93", "record_id": "flaws_cloudtrail:0000489:af0d3097-ca4e-423c-986a-f26678cedd93", "row_index": 489, "timestamp": "2019-04-12T03:54:46Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 873, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af0d3097-ca4e-423c-986a-f26678cedd93", "eventTime": "2019-04-12T03:54:46Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58cd3572-0076-4308-98a0-d186df9aa0e2", "record_id": "flaws_cloudtrail:0000490:58cd3572-0076-4308-98a0-d186df9aa0e2", "row_index": 490, "timestamp": "2019-04-12T03:54:46Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 874, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58cd3572-0076-4308-98a0-d186df9aa0e2", "eventTime": "2019-04-12T03:54:46Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fea8592-ef33-4259-a2aa-1f61c18a2610", "record_id": "flaws_cloudtrail:0000491:3fea8592-ef33-4259-a2aa-1f61c18a2610", "row_index": 491, "timestamp": "2019-04-12T03:54:46Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 873, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fea8592-ef33-4259-a2aa-1f61c18a2610", "eventTime": "2019-04-12T03:54:46Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e78c2f45-a7b2-427e-b4fe-d8c497ff6949", "record_id": "flaws_cloudtrail:0000492:e78c2f45-a7b2-427e-b4fe-d8c497ff6949", "row_index": 492, "timestamp": "2019-04-12T03:54:46Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 900, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e78c2f45-a7b2-427e-b4fe-d8c497ff6949", "eventTime": "2019-04-12T03:54:46Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:ap-northeast-1:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "525048c88-2c3b-4beb-8ed4-13276f8", "record_id": "flaws_cloudtrail:0000493:525048c88-2c3b-4beb-8ed4-13276f8", "row_index": 493, "timestamp": "2019-04-12T03:54:46Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 869, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "525048c88-2c3b-4beb-8ed4-13276f8", "eventTime": "2019-04-12T03:54:46Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a2281b7-50d6-46ba-a1b9-5dfd2aeb39ae", "record_id": "flaws_cloudtrail:0000494:4a2281b7-50d6-46ba-a1b9-5dfd2aeb39ae", "row_index": 494, "timestamp": "2019-04-12T03:54:46Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 900, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a2281b7-50d6-46ba-a1b9-5dfd2aeb39ae", "eventTime": "2019-04-12T03:54:46Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:ap-northeast-2:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b209f2d-de28-479e-889a-208be5bf3c3d", "record_id": "flaws_cloudtrail:0000495:6b209f2d-de28-479e-889a-208be5bf3c3d", "row_index": 495, "timestamp": "2019-04-12T03:54:46Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 875, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b209f2d-de28-479e-889a-208be5bf3c3d", "eventTime": "2019-04-12T03:54:46Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c82069-cfe8-419c-aa77-02f37e065a09", "record_id": "flaws_cloudtrail:0000496:c82069-cfe8-419c-aa77-02f37e065a09", "row_index": 496, "timestamp": "2019-04-12T03:54:46Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c82069-cfe8-419c-aa77-02f37e065a09", "eventTime": "2019-04-12T03:54:46Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "841168-3df6-442a-9fd1-e9883f42c097", "record_id": "flaws_cloudtrail:0000497:841168-3df6-442a-9fd1-e9883f42c097", "row_index": 497, "timestamp": "2019-04-12T03:54:46Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "841168-3df6-442a-9fd1-e9883f42c097", "eventTime": "2019-04-12T03:54:46Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40dc0087-4240-4f09-80e8-5f21397f86a3", "record_id": "flaws_cloudtrail:0000498:40dc0087-4240-4f09-80e8-5f21397f86a3", "row_index": 498, "timestamp": "2019-04-12T03:54:46Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 893, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40dc0087-4240-4f09-80e8-5f21397f86a3", "eventTime": "2019-04-12T03:54:46Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:ap-south-1:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af0d3097-ca4e-423c-986a-f26678cedd93", "record_id": "flaws_cloudtrail:0000499:af0d3097-ca4e-423c-986a-f26678cedd93", "row_index": 499, "timestamp": "2019-04-12T03:54:46Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 873, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af0d3097-ca4e-423c-986a-f26678cedd93", "eventTime": "2019-04-12T03:54:46Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91f0938d-0539-4a79-a1ae-744d633e4294", "record_id": "flaws_cloudtrail:0000500:91f0938d-0539-4a79-a1ae-744d633e4294", "row_index": 500, "timestamp": "2019-04-12T03:54:47Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 900, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91f0938d-0539-4a79-a1ae-744d633e4294", "eventTime": "2019-04-12T03:54:47Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:ap-southeast-2:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5873dd13-9c5f-44ff-a5af-8cc9c966a3fa", "record_id": "flaws_cloudtrail:0000501:5873dd13-9c5f-44ff-a5af-8cc9c966a3fa", "row_index": 501, "timestamp": "2019-04-12T03:54:47Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 873, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5873dd13-9c5f-44ff-a5af-8cc9c966a3fa", "eventTime": "2019-04-12T03:54:47Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35359b7e-fb15-433c-af6b-a7e2e447652d", "record_id": "flaws_cloudtrail:0000502:35359b7e-fb15-433c-af6b-a7e2e447652d", "row_index": 502, "timestamp": "2019-04-12T03:54:47Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 875, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35359b7e-fb15-433c-af6b-a7e2e447652d", "eventTime": "2019-04-12T03:54:47Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb187984e-10bf-4963-a82c-0d57a741f831", "record_id": "flaws_cloudtrail:0000503:eb187984e-10bf-4963-a82c-0d57a741f831", "row_index": 503, "timestamp": "2019-04-12T03:54:47Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 897, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb187984e-10bf-4963-a82c-0d57a741f831", "eventTime": "2019-04-12T03:54:47Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:ca-central-1:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1f357fc-9a10-4822-b3df-5ee644b4f491", "record_id": "flaws_cloudtrail:0000504:f1f357fc-9a10-4822-b3df-5ee644b4f491", "row_index": 504, "timestamp": "2019-04-12T03:54:47Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 873, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1f357fc-9a10-4822-b3df-5ee644b4f491", "eventTime": "2019-04-12T03:54:47Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1722aca8-ad9f-4c80-8fd3-3ba0358cae86", "record_id": "flaws_cloudtrail:0000505:1722aca8-ad9f-4c80-8fd3-3ba0358cae86", "row_index": 505, "timestamp": "2019-04-12T03:54:47Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 896, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1722aca8-ad9f-4c80-8fd3-3ba0358cae86", "eventTime": "2019-04-12T03:54:47Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:eu-central-1:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da1af873-8423-4e25-bb0d-e36a60c171d4", "record_id": "flaws_cloudtrail:0000506:da1af873-8423-4e25-bb0d-e36a60c171d4", "row_index": 506, "timestamp": "2019-04-12T03:54:47Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 871, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da1af873-8423-4e25-bb0d-e36a60c171d4", "eventTime": "2019-04-12T03:54:47Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e00c3b8-1829-4b00-ad3f-cefaa80fb84e", "record_id": "flaws_cloudtrail:0000507:0e00c3b8-1829-4b00-ad3f-cefaa80fb84e", "row_index": 507, "timestamp": "2019-04-12T03:54:47Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 871, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e00c3b8-1829-4b00-ad3f-cefaa80fb84e", "eventTime": "2019-04-12T03:54:47Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee6081d0-e370-4def-b8f0-1c0e9129b1f7", "record_id": "flaws_cloudtrail:0000508:ee6081d0-e370-4def-b8f0-1c0e9129b1f7", "row_index": 508, "timestamp": "2019-04-12T03:54:47Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 890, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee6081d0-e370-4def-b8f0-1c0e9129b1f7", "eventTime": "2019-04-12T03:54:47Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:eu-west-1:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3d43f05-24bb-4f7c-bcbe-5d7939bd0d2c", "record_id": "flaws_cloudtrail:0000509:c3d43f05-24bb-4f7c-bcbe-5d7939bd0d2c", "row_index": 509, "timestamp": "2019-04-12T03:54:47Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3d43f05-24bb-4f7c-bcbe-5d7939bd0d2c", "eventTime": "2019-04-12T03:54:47Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f607abf-32a9-4b29-9212-9678c7c707e1", "record_id": "flaws_cloudtrail:0000510:7f607abf-32a9-4b29-9212-9678c7c707e1", "row_index": 510, "timestamp": "2019-04-12T03:54:47Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f607abf-32a9-4b29-9212-9678c7c707e1", "eventTime": "2019-04-12T03:54:47Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e04ea29-c020-49da-955f-bf635a279c7c", "record_id": "flaws_cloudtrail:0000511:3e04ea29-c020-49da-955f-bf635a279c7c", "row_index": 511, "timestamp": "2019-04-12T03:54:47Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 890, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e04ea29-c020-49da-955f-bf635a279c7c", "eventTime": "2019-04-12T03:54:47Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:eu-west-2:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bab734b7-eb5c-466f-b6a8-010f2f71275", "record_id": "flaws_cloudtrail:0000512:bab734b7-eb5c-466f-b6a8-010f2f71275", "row_index": 512, "timestamp": "2019-04-12T03:54:47Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bab734b7-eb5c-466f-b6a8-010f2f71275", "eventTime": "2019-04-12T03:54:47Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a7f74fc-a1f4-4568-8982-21f5d89a722c", "record_id": "flaws_cloudtrail:0000513:6a7f74fc-a1f4-4568-8982-21f5d89a722c", "row_index": 513, "timestamp": "2019-04-12T03:54:47Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 871, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a7f74fc-a1f4-4568-8982-21f5d89a722c", "eventTime": "2019-04-12T03:54:47Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cbdda9e0-2feb-48b1-b95c-1a674edd1bc2", "record_id": "flaws_cloudtrail:0000514:cbdda9e0-2feb-48b1-b95c-1a674edd1bc2", "row_index": 514, "timestamp": "2019-04-12T03:54:47Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cbdda9e0-2feb-48b1-b95c-1a674edd1bc2", "eventTime": "2019-04-12T03:54:47Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91f0938d-0539-4a79-a1ae-744d633e4294", "record_id": "flaws_cloudtrail:0000515:91f0938d-0539-4a79-a1ae-744d633e4294", "row_index": 515, "timestamp": "2019-04-12T03:54:47Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 900, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91f0938d-0539-4a79-a1ae-744d633e4294", "eventTime": "2019-04-12T03:54:47Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:ap-southeast-2:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5873dd13-9c5f-44ff-a5af-8cc9c966a3fa", "record_id": "flaws_cloudtrail:0000516:5873dd13-9c5f-44ff-a5af-8cc9c966a3fa", "row_index": 516, "timestamp": "2019-04-12T03:54:47Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 873, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5873dd13-9c5f-44ff-a5af-8cc9c966a3fa", "eventTime": "2019-04-12T03:54:47Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35359b7e-fb15-433c-af6b-a7e2e447652d", "record_id": "flaws_cloudtrail:0000517:35359b7e-fb15-433c-af6b-a7e2e447652d", "row_index": 517, "timestamp": "2019-04-12T03:54:47Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 875, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35359b7e-fb15-433c-af6b-a7e2e447652d", "eventTime": "2019-04-12T03:54:47Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb187984e-10bf-4963-a82c-0d57a741f831", "record_id": "flaws_cloudtrail:0000518:eb187984e-10bf-4963-a82c-0d57a741f831", "row_index": 518, "timestamp": "2019-04-12T03:54:47Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 897, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb187984e-10bf-4963-a82c-0d57a741f831", "eventTime": "2019-04-12T03:54:47Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:ca-central-1:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1f357fc-9a10-4822-b3df-5ee644b4f491", "record_id": "flaws_cloudtrail:0000519:f1f357fc-9a10-4822-b3df-5ee644b4f491", "row_index": 519, "timestamp": "2019-04-12T03:54:47Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 873, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1f357fc-9a10-4822-b3df-5ee644b4f491", "eventTime": "2019-04-12T03:54:47Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1722aca8-ad9f-4c80-8fd3-3ba0358cae86", "record_id": "flaws_cloudtrail:0000520:1722aca8-ad9f-4c80-8fd3-3ba0358cae86", "row_index": 520, "timestamp": "2019-04-12T03:54:47Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 896, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1722aca8-ad9f-4c80-8fd3-3ba0358cae86", "eventTime": "2019-04-12T03:54:47Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:eu-central-1:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da1af873-8423-4e25-bb0d-e36a60c171d4", "record_id": "flaws_cloudtrail:0000521:da1af873-8423-4e25-bb0d-e36a60c171d4", "row_index": 521, "timestamp": "2019-04-12T03:54:47Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 871, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da1af873-8423-4e25-bb0d-e36a60c171d4", "eventTime": "2019-04-12T03:54:47Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e00c3b8-1829-4b00-ad3f-cefaa80fb84e", "record_id": "flaws_cloudtrail:0000522:0e00c3b8-1829-4b00-ad3f-cefaa80fb84e", "row_index": 522, "timestamp": "2019-04-12T03:54:47Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 871, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e00c3b8-1829-4b00-ad3f-cefaa80fb84e", "eventTime": "2019-04-12T03:54:47Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee6081d0-e370-4def-b8f0-1c0e9129b1f7", "record_id": "flaws_cloudtrail:0000523:ee6081d0-e370-4def-b8f0-1c0e9129b1f7", "row_index": 523, "timestamp": "2019-04-12T03:54:47Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 890, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee6081d0-e370-4def-b8f0-1c0e9129b1f7", "eventTime": "2019-04-12T03:54:47Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:eu-west-1:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3d43f05-24bb-4f7c-bcbe-5d7939bd0d2c", "record_id": "flaws_cloudtrail:0000524:c3d43f05-24bb-4f7c-bcbe-5d7939bd0d2c", "row_index": 524, "timestamp": "2019-04-12T03:54:47Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3d43f05-24bb-4f7c-bcbe-5d7939bd0d2c", "eventTime": "2019-04-12T03:54:47Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f607abf-32a9-4b29-9212-9678c7c707e1", "record_id": "flaws_cloudtrail:0000525:7f607abf-32a9-4b29-9212-9678c7c707e1", "row_index": 525, "timestamp": "2019-04-12T03:54:47Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f607abf-32a9-4b29-9212-9678c7c707e1", "eventTime": "2019-04-12T03:54:47Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e04ea29-c020-49da-955f-bf635a279c7c", "record_id": "flaws_cloudtrail:0000526:3e04ea29-c020-49da-955f-bf635a279c7c", "row_index": 526, "timestamp": "2019-04-12T03:54:47Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 890, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e04ea29-c020-49da-955f-bf635a279c7c", "eventTime": "2019-04-12T03:54:47Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:eu-west-2:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bab734b7-eb5c-466f-b6a8-010f2f71275", "record_id": "flaws_cloudtrail:0000527:bab734b7-eb5c-466f-b6a8-010f2f71275", "row_index": 527, "timestamp": "2019-04-12T03:54:47Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bab734b7-eb5c-466f-b6a8-010f2f71275", "eventTime": "2019-04-12T03:54:47Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a7f74fc-a1f4-4568-8982-21f5d89a722c", "record_id": "flaws_cloudtrail:0000528:6a7f74fc-a1f4-4568-8982-21f5d89a722c", "row_index": 528, "timestamp": "2019-04-12T03:54:47Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 871, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a7f74fc-a1f4-4568-8982-21f5d89a722c", "eventTime": "2019-04-12T03:54:47Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cbdda9e0-2feb-48b1-b95c-1a674edd1bc2", "record_id": "flaws_cloudtrail:0000529:cbdda9e0-2feb-48b1-b95c-1a674edd1bc2", "row_index": 529, "timestamp": "2019-04-12T03:54:47Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cbdda9e0-2feb-48b1-b95c-1a674edd1bc2", "eventTime": "2019-04-12T03:54:47Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "722f5e66-2f0d-46ff-86c2-faecc477b472", "record_id": "flaws_cloudtrail:0000530:722f5e66-2f0d-46ff-86c2-faecc477b472", "row_index": 530, "timestamp": "2019-04-12T03:54:48Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 871, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "722f5e66-2f0d-46ff-86c2-faecc477b472", "eventTime": "2019-04-12T03:54:48Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb8a3ef2-98d1-4f73-9a29-d4365fb9f677", "record_id": "flaws_cloudtrail:0000531:bb8a3ef2-98d1-4f73-9a29-d4365fb9f677", "row_index": 531, "timestamp": "2019-04-12T03:54:48Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 869, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb8a3ef2-98d1-4f73-9a29-d4365fb9f677", "eventTime": "2019-04-12T03:54:48Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c43d53d4-09f4-4dc9-9f13-009954fce6281", "record_id": "flaws_cloudtrail:0000532:c43d53d4-09f4-4dc9-9f13-009954fce6281", "row_index": 532, "timestamp": "2019-04-12T03:54:48Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 893, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c43d53d4-09f4-4dc9-9f13-009954fce6281", "eventTime": "2019-04-12T03:54:48Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:eu-north-1:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b057655d5-f25a-41af-b436-d3a5a49dd2ff", "record_id": "flaws_cloudtrail:0000533:b057655d5-f25a-41af-b436-d3a5a49dd2ff", "row_index": 533, "timestamp": "2019-04-12T03:54:48Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 869, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b057655d5-f25a-41af-b436-d3a5a49dd2ff", "eventTime": "2019-04-12T03:54:48Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01bb6676-21c5-4515-be71-2ec434c96c39", "record_id": "flaws_cloudtrail:0000534:01bb6676-21c5-4515-be71-2ec434c96c39", "row_index": 534, "timestamp": "2019-04-12T03:54:48Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 890, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01bb6676-21c5-4515-be71-2ec434c96c39", "eventTime": "2019-04-12T03:54:48Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:eu-west-3:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "722f5e66-2f0d-46ff-86c2-faecc477b472", "record_id": "flaws_cloudtrail:0000535:722f5e66-2f0d-46ff-86c2-faecc477b472", "row_index": 535, "timestamp": "2019-04-12T03:54:48Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 871, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "722f5e66-2f0d-46ff-86c2-faecc477b472", "eventTime": "2019-04-12T03:54:48Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb8a3ef2-98d1-4f73-9a29-d4365fb9f677", "record_id": "flaws_cloudtrail:0000536:bb8a3ef2-98d1-4f73-9a29-d4365fb9f677", "row_index": 536, "timestamp": "2019-04-12T03:54:48Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 869, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb8a3ef2-98d1-4f73-9a29-d4365fb9f677", "eventTime": "2019-04-12T03:54:48Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c43d53d4-09f4-4dc9-9f13-009954fce6281", "record_id": "flaws_cloudtrail:0000537:c43d53d4-09f4-4dc9-9f13-009954fce6281", "row_index": 537, "timestamp": "2019-04-12T03:54:48Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 893, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c43d53d4-09f4-4dc9-9f13-009954fce6281", "eventTime": "2019-04-12T03:54:48Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:eu-north-1:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b057655d5-f25a-41af-b436-d3a5a49dd2ff", "record_id": "flaws_cloudtrail:0000538:b057655d5-f25a-41af-b436-d3a5a49dd2ff", "row_index": 538, "timestamp": "2019-04-12T03:54:48Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 869, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b057655d5-f25a-41af-b436-d3a5a49dd2ff", "eventTime": "2019-04-12T03:54:48Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01bb6676-21c5-4515-be71-2ec434c96c39", "record_id": "flaws_cloudtrail:0000539:01bb6676-21c5-4515-be71-2ec434c96c39", "row_index": 539, "timestamp": "2019-04-12T03:54:48Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 890, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01bb6676-21c5-4515-be71-2ec434c96c39", "eventTime": "2019-04-12T03:54:48Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:eu-west-3:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37aa7753-391f-4839-9466-6c7a11ccbcb5", "record_id": "flaws_cloudtrail:0000540:37aa7753-391f-4839-9466-6c7a11ccbcb5", "row_index": 540, "timestamp": "2019-04-12T03:54:49Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37aa7753-391f-4839-9466-6c7a11ccbcb5", "eventTime": "2019-04-12T03:54:49Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3beb4078-611b-4984-a963-9baac6c2bd7f", "record_id": "flaws_cloudtrail:0000541:3beb4078-611b-4984-a963-9baac6c2bd7f", "row_index": 541, "timestamp": "2019-04-12T03:54:49Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 890, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3beb4078-611b-4984-a963-9baac6c2bd7f", "eventTime": "2019-04-12T03:54:49Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:sa-east-1:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb50ae99-5b18-4fa3-9e9f-b7c449f69882", "record_id": "flaws_cloudtrail:0000542:cb50ae99-5b18-4fa3-9e9f-b7c449f69882", "row_index": 542, "timestamp": "2019-04-12T03:54:49Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb50ae99-5b18-4fa3-9e9f-b7c449f69882", "eventTime": "2019-04-12T03:54:49Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0528cca1-9ea5-4efc-b346-f3f8c329341c", "record_id": "flaws_cloudtrail:0000543:0528cca1-9ea5-4efc-b346-f3f8c329341c", "row_index": 543, "timestamp": "2019-04-12T03:54:49Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0528cca1-9ea5-4efc-b346-f3f8c329341c", "eventTime": "2019-04-12T03:54:49Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75e3e223-85a4-4334-ba4b-9b849843a1e6", "record_id": "flaws_cloudtrail:0000544:75e3e223-85a4-4334-ba4b-9b849843a1e6", "row_index": 544, "timestamp": "2019-04-12T03:54:49Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 890, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75e3e223-85a4-4334-ba4b-9b849843a1e6", "eventTime": "2019-04-12T03:54:49Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:us-east-1:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30baa54f-1d49-4d0b-9612-f7a97d8c5062", "record_id": "flaws_cloudtrail:0000545:30baa54f-1d49-4d0b-9612-f7a97d8c5062", "row_index": 545, "timestamp": "2019-04-12T03:54:49Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 890, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30baa54f-1d49-4d0b-9612-f7a97d8c5062", "eventTime": "2019-04-12T03:54:49Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:us-east-2:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a76b630-1b77-43c0-bf4e-f6a37b4dfe32", "record_id": "flaws_cloudtrail:0000546:2a76b630-1b77-43c0-bf4e-f6a37b4dfe32", "row_index": 546, "timestamp": "2019-04-12T03:54:49Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a76b630-1b77-43c0-bf4e-f6a37b4dfe32", "eventTime": "2019-04-12T03:54:49Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8bc9d73-c39c-4e17-8db4-af38aecb9a6f", "record_id": "flaws_cloudtrail:0000547:b8bc9d73-c39c-4e17-8db4-af38aecb9a6f", "row_index": 547, "timestamp": "2019-04-12T03:54:49Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8bc9d73-c39c-4e17-8db4-af38aecb9a6f", "eventTime": "2019-04-12T03:54:49Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c45d6c5-87ad-4522-b96a-e052d0887a35", "record_id": "flaws_cloudtrail:0000548:3c45d6c5-87ad-4522-b96a-e052d0887a35", "row_index": 548, "timestamp": "2019-04-12T03:54:49Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 890, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c45d6c5-87ad-4522-b96a-e052d0887a35", "eventTime": "2019-04-12T03:54:49Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:us-west-1:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "128c0b9d-4b0e-4955-82ed-4a4d5097b4a0", "record_id": "flaws_cloudtrail:0000549:128c0b9d-4b0e-4955-82ed-4a4d5097b4a0", "row_index": 549, "timestamp": "2019-04-12T03:54:49Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "128c0b9d-4b0e-4955-82ed-4a4d5097b4a0", "eventTime": "2019-04-12T03:54:49Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "396c63d6-1de3-4b33-ac6c-b5c797cdfd0b", "record_id": "flaws_cloudtrail:0000550:396c63d6-1de3-4b33-ac6c-b5c797cdfd0b", "row_index": 550, "timestamp": "2019-04-12T03:54:49Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 872, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "396c63d6-1de3-4b33-ac6c-b5c797cdfd0b", "eventTime": "2019-04-12T03:54:49Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28fda814-2a61-421c-b91c-b22e4fc8d5d5", "record_id": "flaws_cloudtrail:0000551:28fda814-2a61-421c-b91c-b22e4fc8d5d5", "row_index": 551, "timestamp": "2019-04-12T03:54:49Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28fda814-2a61-421c-b91c-b22e4fc8d5d5", "eventTime": "2019-04-12T03:54:49Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d71b86b-ebf9-4d90-9517-a21a67e76a0c", "record_id": "flaws_cloudtrail:0000552:3d71b86b-ebf9-4d90-9517-a21a67e76a0c", "row_index": 552, "timestamp": "2019-04-12T03:54:49Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 890, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d71b86b-ebf9-4d90-9517-a21a67e76a0c", "eventTime": "2019-04-12T03:54:49Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:us-west-2:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37aa7753-391f-4839-9466-6c7a11ccbcb5", "record_id": "flaws_cloudtrail:0000553:37aa7753-391f-4839-9466-6c7a11ccbcb5", "row_index": 553, "timestamp": "2019-04-12T03:54:49Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37aa7753-391f-4839-9466-6c7a11ccbcb5", "eventTime": "2019-04-12T03:54:49Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3beb4078-611b-4984-a963-9baac6c2bd7f", "record_id": "flaws_cloudtrail:0000554:3beb4078-611b-4984-a963-9baac6c2bd7f", "row_index": 554, "timestamp": "2019-04-12T03:54:49Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 890, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3beb4078-611b-4984-a963-9baac6c2bd7f", "eventTime": "2019-04-12T03:54:49Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:sa-east-1:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb50ae99-5b18-4fa3-9e9f-b7c449f69882", "record_id": "flaws_cloudtrail:0000555:cb50ae99-5b18-4fa3-9e9f-b7c449f69882", "row_index": 555, "timestamp": "2019-04-12T03:54:49Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb50ae99-5b18-4fa3-9e9f-b7c449f69882", "eventTime": "2019-04-12T03:54:49Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0528cca1-9ea5-4efc-b346-f3f8c329341c", "record_id": "flaws_cloudtrail:0000556:0528cca1-9ea5-4efc-b346-f3f8c329341c", "row_index": 556, "timestamp": "2019-04-12T03:54:49Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0528cca1-9ea5-4efc-b346-f3f8c329341c", "eventTime": "2019-04-12T03:54:49Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75e3e223-85a4-4334-ba4b-9b849843a1e6", "record_id": "flaws_cloudtrail:0000557:75e3e223-85a4-4334-ba4b-9b849843a1e6", "row_index": 557, "timestamp": "2019-04-12T03:54:49Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 890, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75e3e223-85a4-4334-ba4b-9b849843a1e6", "eventTime": "2019-04-12T03:54:49Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:us-east-1:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30baa54f-1d49-4d0b-9612-f7a97d8c5062", "record_id": "flaws_cloudtrail:0000558:30baa54f-1d49-4d0b-9612-f7a97d8c5062", "row_index": 558, "timestamp": "2019-04-12T03:54:49Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 890, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30baa54f-1d49-4d0b-9612-f7a97d8c5062", "eventTime": "2019-04-12T03:54:49Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:us-east-2:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a76b630-1b77-43c0-bf4e-f6a37b4dfe32", "record_id": "flaws_cloudtrail:0000559:2a76b630-1b77-43c0-bf4e-f6a37b4dfe32", "row_index": 559, "timestamp": "2019-04-12T03:54:49Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a76b630-1b77-43c0-bf4e-f6a37b4dfe32", "eventTime": "2019-04-12T03:54:49Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8bc9d73-c39c-4e17-8db4-af38aecb9a6f", "record_id": "flaws_cloudtrail:0000560:b8bc9d73-c39c-4e17-8db4-af38aecb9a6f", "row_index": 560, "timestamp": "2019-04-12T03:54:49Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8bc9d73-c39c-4e17-8db4-af38aecb9a6f", "eventTime": "2019-04-12T03:54:49Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c45d6c5-87ad-4522-b96a-e052d0887a35", "record_id": "flaws_cloudtrail:0000561:3c45d6c5-87ad-4522-b96a-e052d0887a35", "row_index": 561, "timestamp": "2019-04-12T03:54:49Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 890, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c45d6c5-87ad-4522-b96a-e052d0887a35", "eventTime": "2019-04-12T03:54:49Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:us-west-1:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "128c0b9d-4b0e-4955-82ed-4a4d5097b4a0", "record_id": "flaws_cloudtrail:0000562:128c0b9d-4b0e-4955-82ed-4a4d5097b4a0", "row_index": 562, "timestamp": "2019-04-12T03:54:49Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "128c0b9d-4b0e-4955-82ed-4a4d5097b4a0", "eventTime": "2019-04-12T03:54:49Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "396c63d6-1de3-4b33-ac6c-b5c797cdfd0b", "record_id": "flaws_cloudtrail:0000563:396c63d6-1de3-4b33-ac6c-b5c797cdfd0b", "row_index": 563, "timestamp": "2019-04-12T03:54:49Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 872, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "396c63d6-1de3-4b33-ac6c-b5c797cdfd0b", "eventTime": "2019-04-12T03:54:49Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28fda814-2a61-421c-b91c-b22e4fc8d5d5", "record_id": "flaws_cloudtrail:0000564:28fda814-2a61-421c-b91c-b22e4fc8d5d5", "row_index": 564, "timestamp": "2019-04-12T03:54:49Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28fda814-2a61-421c-b91c-b22e4fc8d5d5", "eventTime": "2019-04-12T03:54:49Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d71b86b-ebf9-4d90-9517-a21a67e76a0c", "record_id": "flaws_cloudtrail:0000565:3d71b86b-ebf9-4d90-9517-a21a67e76a0c", "row_index": 565, "timestamp": "2019-04-12T03:54:49Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 890, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d71b86b-ebf9-4d90-9517-a21a67e76a0c", "eventTime": "2019-04-12T03:54:49Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusters on resource: arn:aws:redshift:us-west-2:811596193553:cluster:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "810b1cf2-3514-45ed-8fd8-881615b99427e", "record_id": "flaws_cloudtrail:0000566:810b1cf2-3514-45ed-8fd8-881615b99427e", "row_index": 566, "timestamp": "2019-04-12T03:54:50Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 869, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "810b1cf2-3514-45ed-8fd8-881615b99427e", "eventTime": "2019-04-12T03:54:50Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "604266a6c-29f4-43a2-a435-9899aa011d8d", "record_id": "flaws_cloudtrail:0000567:604266a6c-29f4-43a2-a435-9899aa011d8d", "row_index": 567, "timestamp": "2019-04-12T03:54:50Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 869, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "604266a6c-29f4-43a2-a435-9899aa011d8d", "eventTime": "2019-04-12T03:54:50Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "810b1cf2-3514-45ed-8fd8-881615b99427e", "record_id": "flaws_cloudtrail:0000568:810b1cf2-3514-45ed-8fd8-881615b99427e", "row_index": 568, "timestamp": "2019-04-12T03:54:50Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 869, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "810b1cf2-3514-45ed-8fd8-881615b99427e", "eventTime": "2019-04-12T03:54:50Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "604266a6c-29f4-43a2-a435-9899aa011d8d", "record_id": "flaws_cloudtrail:0000569:604266a6c-29f4-43a2-a435-9899aa011d8d", "row_index": 569, "timestamp": "2019-04-12T03:54:50Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 869, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "604266a6c-29f4-43a2-a435-9899aa011d8d", "eventTime": "2019-04-12T03:54:50Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1471e2c-226d-4265-a8f8-e979c66db0fe", "record_id": "flaws_cloudtrail:0000570:a1471e2c-226d-4265-a8f8-e979c66db0fe", "row_index": 570, "timestamp": "2019-04-12T03:54:53Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 900, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1471e2c-226d-4265-a8f8-e979c66db0fe", "eventTime": "2019-04-12T03:54:53Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41857c-f3f2-4aba-bba1-a728820f37a1f", "record_id": "flaws_cloudtrail:0000571:41857c-f3f2-4aba-bba1-a728820f37a1f", "row_index": 571, "timestamp": "2019-04-12T03:54:53Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41857c-f3f2-4aba-bba1-a728820f37a1f", "eventTime": "2019-04-12T03:54:53Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1471e2c-226d-4265-a8f8-e979c66db0fe", "record_id": "flaws_cloudtrail:0000572:a1471e2c-226d-4265-a8f8-e979c66db0fe", "row_index": 572, "timestamp": "2019-04-12T03:54:53Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 900, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1471e2c-226d-4265-a8f8-e979c66db0fe", "eventTime": "2019-04-12T03:54:53Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41857c-f3f2-4aba-bba1-a728820f37a1f", "record_id": "flaws_cloudtrail:0000573:41857c-f3f2-4aba-bba1-a728820f37a1f", "row_index": 573, "timestamp": "2019-04-12T03:54:53Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41857c-f3f2-4aba-bba1-a728820f37a1f", "eventTime": "2019-04-12T03:54:53Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9042fdfe-c5a4-44b8-87ea-ed616bb61e06", "record_id": "flaws_cloudtrail:0000574:9042fdfe-c5a4-44b8-87ea-ed616bb61e06", "row_index": 574, "timestamp": "2019-04-12T03:54:54Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 899, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9042fdfe-c5a4-44b8-87ea-ed616bb61e06", "eventTime": "2019-04-12T03:54:54Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a06d6b05-d47f-41a8-9273-291261e9d", "record_id": "flaws_cloudtrail:0000575:a06d6b05-d47f-41a8-9273-291261e9d", "row_index": 575, "timestamp": "2019-04-12T03:54:54Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a06d6b05-d47f-41a8-9273-291261e9d", "eventTime": "2019-04-12T03:54:54Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "954450d-c17f-4e55-91f7-6551d2fc7858", "record_id": "flaws_cloudtrail:0000576:954450d-c17f-4e55-91f7-6551d2fc7858", "row_index": 576, "timestamp": "2019-04-12T03:54:54Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 896, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "954450d-c17f-4e55-91f7-6551d2fc7858", "eventTime": "2019-04-12T03:54:54Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e49ded6-9983-43fb-a100-0079d267ab6a", "record_id": "flaws_cloudtrail:0000577:9e49ded6-9983-43fb-a100-0079d267ab6a", "row_index": 577, "timestamp": "2019-04-12T03:54:54Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 898, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e49ded6-9983-43fb-a100-0079d267ab6a", "eventTime": "2019-04-12T03:54:54Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c52026-12d1-4a06-b049-1f86b75e25a3", "record_id": "flaws_cloudtrail:0000578:1c52026-12d1-4a06-b049-1f86b75e25a3", "row_index": 578, "timestamp": "2019-04-12T03:54:54Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c52026-12d1-4a06-b049-1f86b75e25a3", "eventTime": "2019-04-12T03:54:54Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "712d95de-ab41-4442-925f-01aef590f623", "record_id": "flaws_cloudtrail:0000579:712d95de-ab41-4442-925f-01aef590f623", "row_index": 579, "timestamp": "2019-04-12T03:54:54Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 895, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "712d95de-ab41-4442-925f-01aef590f623", "eventTime": "2019-04-12T03:54:54Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e856d1c-9cf7-446c-9a42-4fa5612c1425", "record_id": "flaws_cloudtrail:0000580:1e856d1c-9cf7-446c-9a42-4fa5612c1425", "row_index": 580, "timestamp": "2019-04-12T03:54:54Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 899, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e856d1c-9cf7-446c-9a42-4fa5612c1425", "eventTime": "2019-04-12T03:54:54Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b903133-461a-4472-9e26-af562a19a439", "record_id": "flaws_cloudtrail:0000581:0b903133-461a-4472-9e26-af562a19a439", "row_index": 581, "timestamp": "2019-04-12T03:54:54Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 897, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b903133-461a-4472-9e26-af562a19a439", "eventTime": "2019-04-12T03:54:54Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "216667f7-09db-476c-8230-7ad4c961eb89", "record_id": "flaws_cloudtrail:0000582:216667f7-09db-476c-8230-7ad4c961eb89", "row_index": 582, "timestamp": "2019-04-12T03:54:54Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "216667f7-09db-476c-8230-7ad4c961eb89", "eventTime": "2019-04-12T03:54:54Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4df0ade5-1b17-4ff4-ba26-4f199204b5", "record_id": "flaws_cloudtrail:0000583:4df0ade5-1b17-4ff4-ba26-4f199204b5", "row_index": 583, "timestamp": "2019-04-12T03:54:54Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 968, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4df0ade5-1b17-4ff4-ba26-4f199204b5", "eventTime": "2019-04-12T03:54:54Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb0aec9e-41c7-4b81-a152-714c3bd71c1b", "record_id": "flaws_cloudtrail:0000584:eb0aec9e-41c7-4b81-a152-714c3bd71c1b", "row_index": 584, "timestamp": "2019-04-12T03:54:54Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 965, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb0aec9e-41c7-4b81-a152-714c3bd71c1b", "eventTime": "2019-04-12T03:54:54Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9042fdfe-c5a4-44b8-87ea-ed616bb61e06", "record_id": "flaws_cloudtrail:0000585:9042fdfe-c5a4-44b8-87ea-ed616bb61e06", "row_index": 585, "timestamp": "2019-04-12T03:54:54Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 899, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9042fdfe-c5a4-44b8-87ea-ed616bb61e06", "eventTime": "2019-04-12T03:54:54Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a06d6b05-d47f-41a8-9273-291261e9d", "record_id": "flaws_cloudtrail:0000586:a06d6b05-d47f-41a8-9273-291261e9d", "row_index": 586, "timestamp": "2019-04-12T03:54:54Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a06d6b05-d47f-41a8-9273-291261e9d", "eventTime": "2019-04-12T03:54:54Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "954450d-c17f-4e55-91f7-6551d2fc7858", "record_id": "flaws_cloudtrail:0000587:954450d-c17f-4e55-91f7-6551d2fc7858", "row_index": 587, "timestamp": "2019-04-12T03:54:54Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 896, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "954450d-c17f-4e55-91f7-6551d2fc7858", "eventTime": "2019-04-12T03:54:54Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e49ded6-9983-43fb-a100-0079d267ab6a", "record_id": "flaws_cloudtrail:0000588:9e49ded6-9983-43fb-a100-0079d267ab6a", "row_index": 588, "timestamp": "2019-04-12T03:54:54Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 898, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e49ded6-9983-43fb-a100-0079d267ab6a", "eventTime": "2019-04-12T03:54:54Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c52026-12d1-4a06-b049-1f86b75e25a3", "record_id": "flaws_cloudtrail:0000589:1c52026-12d1-4a06-b049-1f86b75e25a3", "row_index": 589, "timestamp": "2019-04-12T03:54:54Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c52026-12d1-4a06-b049-1f86b75e25a3", "eventTime": "2019-04-12T03:54:54Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "712d95de-ab41-4442-925f-01aef590f623", "record_id": "flaws_cloudtrail:0000590:712d95de-ab41-4442-925f-01aef590f623", "row_index": 590, "timestamp": "2019-04-12T03:54:54Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 895, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "712d95de-ab41-4442-925f-01aef590f623", "eventTime": "2019-04-12T03:54:54Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e856d1c-9cf7-446c-9a42-4fa5612c1425", "record_id": "flaws_cloudtrail:0000591:1e856d1c-9cf7-446c-9a42-4fa5612c1425", "row_index": 591, "timestamp": "2019-04-12T03:54:54Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 899, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e856d1c-9cf7-446c-9a42-4fa5612c1425", "eventTime": "2019-04-12T03:54:54Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b903133-461a-4472-9e26-af562a19a439", "record_id": "flaws_cloudtrail:0000592:0b903133-461a-4472-9e26-af562a19a439", "row_index": 592, "timestamp": "2019-04-12T03:54:54Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 897, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b903133-461a-4472-9e26-af562a19a439", "eventTime": "2019-04-12T03:54:54Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "216667f7-09db-476c-8230-7ad4c961eb89", "record_id": "flaws_cloudtrail:0000593:216667f7-09db-476c-8230-7ad4c961eb89", "row_index": 593, "timestamp": "2019-04-12T03:54:54Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "216667f7-09db-476c-8230-7ad4c961eb89", "eventTime": "2019-04-12T03:54:54Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4df0ade5-1b17-4ff4-ba26-4f199204b5", "record_id": "flaws_cloudtrail:0000594:4df0ade5-1b17-4ff4-ba26-4f199204b5", "row_index": 594, "timestamp": "2019-04-12T03:54:54Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 968, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4df0ade5-1b17-4ff4-ba26-4f199204b5", "eventTime": "2019-04-12T03:54:54Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb0aec9e-41c7-4b81-a152-714c3bd71c1b", "record_id": "flaws_cloudtrail:0000595:eb0aec9e-41c7-4b81-a152-714c3bd71c1b", "row_index": 595, "timestamp": "2019-04-12T03:54:54Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 965, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb0aec9e-41c7-4b81-a152-714c3bd71c1b", "eventTime": "2019-04-12T03:54:54Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1dee4139-31ab-43b4-b1cb-f0e080c04960", "record_id": "flaws_cloudtrail:0000596:1dee4139-31ab-43b4-b1cb-f0e080c04960", "row_index": 596, "timestamp": "2019-04-12T03:54:55Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 963, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1dee4139-31ab-43b4-b1cb-f0e080c04960", "eventTime": "2019-04-12T03:54:55Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60d5edc0-888e-4e39-99c9-3d90b7ff080e", "record_id": "flaws_cloudtrail:0000597:60d5edc0-888e-4e39-99c9-3d90b7ff080e", "row_index": 597, "timestamp": "2019-04-12T03:54:55Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 964, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60d5edc0-888e-4e39-99c9-3d90b7ff080e", "eventTime": "2019-04-12T03:54:55Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c56c89ee-ec27-47d7-adde-663de280f11d", "record_id": "flaws_cloudtrail:0000598:c56c89ee-ec27-47d7-adde-663de280f11d", "row_index": 598, "timestamp": "2019-04-12T03:54:55Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 964, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c56c89ee-ec27-47d7-adde-663de280f11d", "eventTime": "2019-04-12T03:54:55Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "948f29a0-93be-478c-9f2b-d8d9d7237431", "record_id": "flaws_cloudtrail:0000599:948f29a0-93be-478c-9f2b-d8d9d7237431", "row_index": 599, "timestamp": "2019-04-12T03:54:55Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 958, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "948f29a0-93be-478c-9f2b-d8d9d7237431", "eventTime": "2019-04-12T03:54:55Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab923334-1a9d-424c-bb04-c318c43250", "record_id": "flaws_cloudtrail:0000600:ab923334-1a9d-424c-bb04-c318c43250", "row_index": 600, "timestamp": "2019-04-12T03:54:55Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 963, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab923334-1a9d-424c-bb04-c318c43250", "eventTime": "2019-04-12T03:54:55Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f36b619d-b595-4ee3-a385-a281fcafc2cb", "record_id": "flaws_cloudtrail:0000601:f36b619d-b595-4ee3-a385-a281fcafc2cb", "row_index": 601, "timestamp": "2019-04-12T03:54:55Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 965, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f36b619d-b595-4ee3-a385-a281fcafc2cb", "eventTime": "2019-04-12T03:54:55Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e75c3f72-174c-42e2-b850-ce8c134deab1", "record_id": "flaws_cloudtrail:0000602:e75c3f72-174c-42e2-b850-ce8c134deab1", "row_index": 602, "timestamp": "2019-04-12T03:54:55Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 971, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e75c3f72-174c-42e2-b850-ce8c134deab1", "eventTime": "2019-04-12T03:54:55Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fec53ffd-d824-49bb-b0a8-4a03cf083a87", "record_id": "flaws_cloudtrail:0000603:fec53ffd-d824-49bb-b0a8-4a03cf083a87", "row_index": 603, "timestamp": "2019-04-12T03:54:55Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 965, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fec53ffd-d824-49bb-b0a8-4a03cf083a87", "eventTime": "2019-04-12T03:54:55Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e03edf20-3743-4321-a2bb-7840cf188651", "record_id": "flaws_cloudtrail:0000604:e03edf20-3743-4321-a2bb-7840cf188651", "row_index": 604, "timestamp": "2019-04-12T03:54:55Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "147.249.23.123", "user_agent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 964, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e03edf20-3743-4321-a2bb-7840cf188651", "eventTime": "2019-04-12T03:54:55Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "147.249.23.123", "userAgent": "[Boto3/1.9.120 Python/2.7.15+ Linux/4.9.125-linuxkit Botocore/1.12.130]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "logging": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}