Task: attack_reconstruction (flaws_cloudtrail)
Prompt: An IAM credential appears to have been reused from an unfamiliar client, with a brief identity check followed by broad account discovery and a privileged change. Identify the responsible principal, the MITRE ATT&CK technique that best fits the activity, the supporting CloudTrail record_ids for each phase of the chain, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b242333f-4af0-45de-a76b-1c0444287e20", "record_id": "flaws_cloudtrail:0000000:3b242333f-4af0-45de-a76b-1c0444287e20", "row_index": 0, "timestamp": "2017-05-26T22:43:15Z", "event_type": "ListEntitiesForPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIASR0YXTBAN3C08WET", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b242333f-4af0-45de-a76b-1c0444287e20", "eventTime": "2017-05-26T22:43:15Z", "eventName": "ListEntitiesForPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIASR0YXTBAN3C08WET", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:42:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"entityFilter": "Group", "policyArn": "arn:aws:iam::aws:policy/AWSOpsWorksCloudWatchLogs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f76afab-90f1-46db-8c00-6f2b5b27610", "record_id": "flaws_cloudtrail:0000001:4f76afab-90f1-46db-8c00-6f2b5b27610", "row_index": 1, "timestamp": "2017-05-26T22:43:15Z", "event_type": "ListEntitiesForPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIASR0YXTBAN3C08WET", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1072, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f76afab-90f1-46db-8c00-6f2b5b27610", "eventTime": "2017-05-26T22:43:15Z", "eventName": "ListEntitiesForPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIASR0YXTBAN3C08WET", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:42:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"entityFilter": "Group", "policyArn": "arn:aws:iam::aws:policy/AmazonInspectorReadOnlyAccess"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ba5e705-6cf3-46dc-bb19-aaf2a2c1a4cd", "record_id": "flaws_cloudtrail:0000002:7ba5e705-6cf3-46dc-bb19-aaf2a2c1a4cd", "row_index": 2, "timestamp": "2017-05-26T22:43:15Z", "event_type": "ListEntitiesForPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIASR0YXTBAN3C08WET", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ba5e705-6cf3-46dc-bb19-aaf2a2c1a4cd", "eventTime": "2017-05-26T22:43:15Z", "eventName": "ListEntitiesForPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIASR0YXTBAN3C08WET", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:42:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"entityFilter": "Group", "policyArn": "arn:aws:iam::aws:policy/CloudSearchReadOnlyAccess"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "925bc996-2d78-430b-8e36-b39a836d2d82", "record_id": "flaws_cloudtrail:0000003:925bc996-2d78-430b-8e36-b39a836d2d82", "row_index": 3, "timestamp": "2017-05-26T22:43:15Z", "event_type": "ListEntitiesForPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIASR0YXTBAN3C08WET", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1074, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "925bc996-2d78-430b-8e36-b39a836d2d82", "eventTime": "2017-05-26T22:43:15Z", "eventName": "ListEntitiesForPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIASR0YXTBAN3C08WET", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:42:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"entityFilter": "Group", "policyArn": "arn:aws:iam::aws:policy/AmazonAppStreamReadOnlyAccess"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4540bbca-5b36-47ce-b39f-f4f2f6b3958c", "record_id": "flaws_cloudtrail:0000004:4540bbca-5b36-47ce-b39f-f4f2f6b3958c", "row_index": 4, "timestamp": "2017-05-26T22:43:15Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIA9ZJX9RD4XNBCQNH0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "116.64.169.60", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 543, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4540bbca-5b36-47ce-b39f-f4f2f6b3958c", "eventTime": "2017-05-26T22:43:15Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "116.64.169.60", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIA9ZJX9RD4XNBCQNH0", "userName": "SecurityMokey"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c3a902f-9f75-49b8-b4c6-d2c9af2039fd", "record_id": "flaws_cloudtrail:0000005:8c3a902f-9f75-49b8-b4c6-d2c9af2039fd", "row_index": 5, "timestamp": "2017-05-26T22:43:16Z", "event_type": "ListEntitiesForPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIASR0YXTBAN3C08WET", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c3a902f-9f75-49b8-b4c6-d2c9af2039fd", "eventTime": "2017-05-26T22:43:16Z", "eventName": "ListEntitiesForPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIASR0YXTBAN3C08WET", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:42:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"entityFilter": "Group", "policyArn": "arn:aws:iam::aws:policy/CloudWatchEventsFullAccess"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58077a5-c446-4e41-b8d4-f0f3eeb79d2e", "record_id": "flaws_cloudtrail:0000006:58077a5-c446-4e41-b8d4-f0f3eeb79d2e", "row_index": 6, "timestamp": "2017-05-26T22:43:16Z", "event_type": "ListEntitiesForPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIASR0YXTBAN3C08WET", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58077a5-c446-4e41-b8d4-f0f3eeb79d2e", "eventTime": "2017-05-26T22:43:16Z", "eventName": "ListEntitiesForPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIASR0YXTBAN3C08WET", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:42:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"entityFilter": "Group", "policyArn": "arn:aws:iam::aws:policy/PowerUserAccess"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e7a56d17-c1d9-4710-8cc5-608f2d121559", "record_id": "flaws_cloudtrail:0000007:e7a56d17-c1d9-4710-8cc5-608f2d121559", "row_index": 7, "timestamp": "2017-05-26T22:43:16Z", "event_type": "ListEntitiesForPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIASR0YXTBAN3C08WET", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1074, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e7a56d17-c1d9-4710-8cc5-608f2d121559", "eventTime": "2017-05-26T22:43:16Z", "eventName": "ListEntitiesForPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIASR0YXTBAN3C08WET", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:42:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"entityFilter": "Group", "policyArn": "arn:aws:iam::aws:policy/AWSCertificateManagerFullAccess"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dea4afc0-0f42-4568-9ac6-307384db92", "record_id": "flaws_cloudtrail:0000008:dea4afc0-0f42-4568-9ac6-307384db92", "row_index": 8, "timestamp": "2017-05-26T22:43:16Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAO4OSOG0KSG3O99DO", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 962, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dea4afc0-0f42-4568-9ac6-307384db92", "eventTime": "2017-05-26T22:43:16Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAO4OSOG0KSG3O99DO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:43:16Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"pathPrefix": "/"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c50cf488-a681-42d2-a040-cf4f309ee8da", "record_id": "flaws_cloudtrail:0000009:c50cf488-a681-42d2-a040-cf4f309ee8da", "row_index": 9, "timestamp": "2017-05-26T22:43:16Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c50cf488-a681-42d2-a040-cf4f309ee8da", "eventTime": "2017-05-26T22:43:16Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAO4OSOG0KSG3O99DO", "expiration": "May 26, 2017 11:43:16 PM", "sessionToken": "FQoDYXdzECAaDNCK/pVoi+p1cPSsGiLMASc8wuOAJyNEkf2QYvYib0YrZ/9wbY4pSlFvwU7B9xLSjq9k/nzps62vZPM9CWATfNbYhG/xCUhGOjwCaryuzoOZ6mGwmya1XHi+xCfyU29km3OheCjAApwgMT1ZEawK5UdxsJrnY7yYoT7cxvrgBaiZh/6FczoDH5CkwqOnHhdeDKjW5Z5MGEcVMXpK2YkJIz4WJFDEm9/hMbw6q6WL4gF7fm08mWGPqZYpmR+uz1a5qFlkqSWZiJwAfeEnZtMNGRFCEAPKBpyWlOENoiiE36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b3b467a-467d-42a2-b23d-5043ffe4cf65", "record_id": "flaws_cloudtrail:0000010:1b3b467a-467d-42a2-b23d-5043ffe4cf65", "row_index": 10, "timestamp": "2017-05-26T22:43:17Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b3b467a-467d-42a2-b23d-5043ffe4cf65", "eventTime": "2017-05-26T22:43:17Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA3BZT2Y5B78NVFXF8", "expiration": "May 26, 2017 11:43:17 PM", "sessionToken": "FQoDYXdzECAaDKN0YNil051JaTU1fSLMATlDZ0aLfmllm3htdE2tBiKsKUa0nelUSGTo0uxQFH5IAZs5JxJLMZKMMqwNWyvI6RlvxTba1ea48ZehiO9BzYnrM9WWmqSgMwALg+cw9layPUvFvINnLvgUJSpPGgCFed7opKn/b6og9nt4xZRfVojs1yUnCt9dNVvsLsHYMMKSGiVULtzPPVzr8QJg5WdTA3sJnf47xm/+ZKFLTZRCeR14oa0sNvsRX0Pg3N8+NxFIpzezoRCSqtGPuzgNIPyj9JCSB4kJJ3Rc483JqCiF36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7b3c494-91e1-4c6f-9862-6346bfb81ed8", "record_id": "flaws_cloudtrail:0000011:d7b3c494-91e1-4c6f-9862-6346bfb81ed8", "row_index": 11, "timestamp": "2017-05-26T22:43:18Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA3BZT2Y5B78NVFXF8", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1012, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7b3c494-91e1-4c6f-9862-6346bfb81ed8", "eventTime": "2017-05-26T22:43:18Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA3BZT2Y5B78NVFXF8", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:43:17Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e47ef98d-9e7d-412b-a1a8-281cd097416d5", "record_id": "flaws_cloudtrail:0000012:e47ef98d-9e7d-412b-a1a8-281cd097416d5", "row_index": 12, "timestamp": "2017-05-26T22:43:19Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA3BZT2Y5B78NVFXF8", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1012, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e47ef98d-9e7d-412b-a1a8-281cd097416d5", "eventTime": "2017-05-26T22:43:19Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA3BZT2Y5B78NVFXF8", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:43:17Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26c4ca14-e0ff-4a36-b6d2-e11fa1a0c2b4", "record_id": "flaws_cloudtrail:0000013:26c4ca14-e0ff-4a36-b6d2-e11fa1a0c2b4", "row_index": 13, "timestamp": "2017-05-26T22:43:21Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA3BZT2Y5B78NVFXF8", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1010, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26c4ca14-e0ff-4a36-b6d2-e11fa1a0c2b4", "eventTime": "2017-05-26T22:43:21Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA3BZT2Y5B78NVFXF8", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:43:17Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56484c73-fc6b-4b66-bcd1-5abd24c93feb", "record_id": "flaws_cloudtrail:0000014:56484c73-fc6b-4b66-bcd1-5abd24c93feb", "row_index": 14, "timestamp": "2017-05-26T22:43:22Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA3BZT2Y5B78NVFXF8", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1012, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56484c73-fc6b-4b66-bcd1-5abd24c93feb", "eventTime": "2017-05-26T22:43:22Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA3BZT2Y5B78NVFXF8", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:43:17Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99568e-78e7-4909-8aa8-2d8e961095a23", "record_id": "flaws_cloudtrail:0000015:99568e-78e7-4909-8aa8-2d8e961095a23", "row_index": 15, "timestamp": "2017-05-26T22:43:23Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA3BZT2Y5B78NVFXF8", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1012, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99568e-78e7-4909-8aa8-2d8e961095a23", "eventTime": "2017-05-26T22:43:23Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA3BZT2Y5B78NVFXF8", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:43:17Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f11eb327-6140-4a6d-9860-f85977a01", "record_id": "flaws_cloudtrail:0000016:f11eb327-6140-4a6d-9860-f85977a01", "row_index": 16, "timestamp": "2017-05-26T22:43:24Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA3BZT2Y5B78NVFXF8", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1007, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f11eb327-6140-4a6d-9860-f85977a01", "eventTime": "2017-05-26T22:43:24Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA3BZT2Y5B78NVFXF8", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:43:17Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "003edd12-291d-44cd-bf1e-c9849e2075f0", "record_id": "flaws_cloudtrail:0000017:003edd12-291d-44cd-bf1e-c9849e2075f0", "row_index": 17, "timestamp": "2017-05-26T22:43:25Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA3BZT2Y5B78NVFXF8", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1010, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "003edd12-291d-44cd-bf1e-c9849e2075f0", "eventTime": "2017-05-26T22:43:25Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA3BZT2Y5B78NVFXF8", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:43:17Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1ff234e-1ee9-4e4d-a353-7375eac02dcf", "record_id": "flaws_cloudtrail:0000018:a1ff234e-1ee9-4e4d-a353-7375eac02dcf", "row_index": 18, "timestamp": "2017-05-26T22:43:26Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA3BZT2Y5B78NVFXF8", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1007, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1ff234e-1ee9-4e4d-a353-7375eac02dcf", "eventTime": "2017-05-26T22:43:26Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA3BZT2Y5B78NVFXF8", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:43:17Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4dae1283-59f2-4cfd-92af-9bc8a695d189", "record_id": "flaws_cloudtrail:0000019:4dae1283-59f2-4cfd-92af-9bc8a695d189", "row_index": 19, "timestamp": "2017-05-26T22:43:27Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA3BZT2Y5B78NVFXF8", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1007, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4dae1283-59f2-4cfd-92af-9bc8a695d189", "eventTime": "2017-05-26T22:43:27Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA3BZT2Y5B78NVFXF8", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:43:17Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "094f2d0a-646b-4d94-a951-611fe5f08b2b", "record_id": "flaws_cloudtrail:0000020:094f2d0a-646b-4d94-a951-611fe5f08b2b", "row_index": 20, "timestamp": "2017-05-26T22:43:28Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA3BZT2Y5B78NVFXF8", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1007, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "094f2d0a-646b-4d94-a951-611fe5f08b2b", "eventTime": "2017-05-26T22:43:28Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA3BZT2Y5B78NVFXF8", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:43:17Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a4957ffc-14a9-471e-9181-9c4f39f1ae62", "record_id": "flaws_cloudtrail:0000021:a4957ffc-14a9-471e-9181-9c4f39f1ae62", "row_index": 21, "timestamp": "2017-05-26T22:43:29Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA3BZT2Y5B78NVFXF8", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1007, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a4957ffc-14a9-471e-9181-9c4f39f1ae62", "eventTime": "2017-05-26T22:43:29Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA3BZT2Y5B78NVFXF8", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:43:17Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "645a7411-a906-469d-8d96-de8c4fcf7cec", "record_id": "flaws_cloudtrail:0000022:645a7411-a906-469d-8d96-de8c4fcf7cec", "row_index": 22, "timestamp": "2017-05-26T22:43:30Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA3BZT2Y5B78NVFXF8", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "645a7411-a906-469d-8d96-de8c4fcf7cec", "eventTime": "2017-05-26T22:43:30Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA3BZT2Y5B78NVFXF8", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:43:17Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0dc44d52-29e2-456b-aafb-bd8b1415890c", "record_id": "flaws_cloudtrail:0000023:0dc44d52-29e2-456b-aafb-bd8b1415890c", "row_index": 23, "timestamp": "2017-05-26T22:43:30Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA3BZT2Y5B78NVFXF8", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1007, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0dc44d52-29e2-456b-aafb-bd8b1415890c", "eventTime": "2017-05-26T22:43:30Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA3BZT2Y5B78NVFXF8", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:43:17Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "062f7ebb-be98-44aa-9b30-3bd81548", "record_id": "flaws_cloudtrail:0000024:062f7ebb-be98-44aa-9b30-3bd81548", "row_index": 24, "timestamp": "2017-05-26T22:43:31Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1450, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "062f7ebb-be98-44aa-9b30-3bd81548", "eventTime": "2017-05-26T22:43:31Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAIMLD91DURW8GDLE1", "expiration": "May 26, 2017 11:43:31 PM", "sessionToken": "FQoDYXdzECAaDKsvzVxH4jrhL6RluyLMAewuq0FZQA/K53HTwZ74uaGn87lH7TxOZyUowNtahTc1tZ7KibUYfa+Eg+13Ho30PNpVESf3kkNN9cV4uS020p4ZvtxxuwMNQiubix5iay1YuMaZLh1VkGYSwpahUfEnUp9PvKZucqit4N9TTQoQOZklJjlLMgvY5+IBWCRMtfx6HJ74L7acUPabqucdETCReWyfWtPYvZw/me9foVmaV4TaS31/slSTmSgvN1GILFekD+JzByNhKHEAEML61MhIMKdQH33flIDX1L7exCiT36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4bd1719d-9d14-4f10-a477-3264cc0afc74", "record_id": "flaws_cloudtrail:0000025:4bd1719d-9d14-4f10-a477-3264cc0afc74", "row_index": 25, "timestamp": "2017-05-26T22:43:31Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA3BZT2Y5B78NVFXF8", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1007, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4bd1719d-9d14-4f10-a477-3264cc0afc74", "eventTime": "2017-05-26T22:43:31Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA3BZT2Y5B78NVFXF8", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:43:17Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e069b5ac-9ff1-47fc-8a64-0434b8ba822b", "record_id": "flaws_cloudtrail:0000026:e069b5ac-9ff1-47fc-8a64-0434b8ba822b", "row_index": 26, "timestamp": "2017-05-26T22:43:32Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e069b5ac-9ff1-47fc-8a64-0434b8ba822b", "eventTime": "2017-05-26T22:43:32Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAL73PPYNMLESHY5F3", "expiration": "May 26, 2017 11:43:32 PM", "sessionToken": "FQoDYXdzECAaDIttlZ7IHGR9gmYLgSLMAbcmhkKHoPh22vjsJgyVYpBoeilhKCgI7VAT05RzXo92py/COQ1kfjML08u6cmpD965SX10+srLBFQg6HkXSUn4n4M3AV14K59/5OFQWb1icn/JK484Rm1t+1LaPrGZRvCwdoZegncA/RiQl0TqfuliCQRPKE1/lGrJrhxohnxmmInEIqbQ3ptE82AMFy4EqPA0coOrrgEZvMRtsakLsIgCBhrlmKRA2mazdDxBHE0J/Pd+LZNAlErEbruBI/6Nh/5j/LZYyHXAT9n1zISiU36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "034aae82-353d-43de-876a-4805af4d4612", "record_id": "flaws_cloudtrail:0000027:034aae82-353d-43de-876a-4805af4d4612", "row_index": 27, "timestamp": "2017-05-26T22:43:32Z", "event_type": "DescribeConfigRules", "event_source": "config.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAIMLD91DURW8GDLE1", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 992, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "034aae82-353d-43de-876a-4805af4d4612", "eventTime": "2017-05-26T22:43:32Z", "eventName": "DescribeConfigRules", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAIMLD91DURW8GDLE1", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:43:31Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "responseElements": {"configRules": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "860595e9c-d309-4851-85b4-a45060cae152", "record_id": "flaws_cloudtrail:0000028:860595e9c-d309-4851-85b4-a45060cae152", "row_index": 28, "timestamp": "2017-05-26T22:43:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1455, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "860595e9c-d309-4851-85b4-a45060cae152", "eventTime": "2017-05-26T22:43:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAZPKAENVH2UVAW4I1", "expiration": "May 26, 2017 11:43:33 PM", "sessionToken": "FQoDYXdzECAaDFrP+Cr+xwwTpldPkiLMAbchVpXGkNHyP+9RwrA8XIu2mQtK/DctP2JGU0z0H2Wub8MlWP4N7940MvCh19tgzzizOThaqCOAftuqVe3+CBNZ3VxoLUC8Comq5aBVmSy4bXsLpYKjgfSVO1UGg3vEeaierusaAqcUSbH7h0HiFaZ/nshwFyLq8L0JVL9Aqb4dxTHfh+0b7MDws3jH+Lx4fEIhgqXJM8elr/O4OTde3QYLGiZLH6/EgG2imXm6fUqYiWfhVWg42Un4nYqNynpRyOu+C/xQaIbCd2vCtCiV36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "460c8bc5-8ad8-49c7-8e21-bc617737b", "record_id": "flaws_cloudtrail:0000029:460c8bc5-8ad8-49c7-8e21-bc617737b", "row_index": 29, "timestamp": "2017-05-26T22:43:33Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAL73PPYNMLESHY5F3", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 971, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "460c8bc5-8ad8-49c7-8e21-bc617737b", "eventTime": "2017-05-26T22:43:33Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAL73PPYNMLESHY5F3", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:43:32Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8a8087a-1abe-46c4-8394-6bb61326b210", "record_id": "flaws_cloudtrail:0000030:a8a8087a-1abe-46c4-8394-6bb61326b210", "row_index": 30, "timestamp": "2017-05-26T22:43:34Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8a8087a-1abe-46c4-8394-6bb61326b210", "eventTime": "2017-05-26T22:43:34Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAKIQ7TV1O0AXVVPCR", "expiration": "May 26, 2017 11:43:34 PM", "sessionToken": "FQoDYXdzECAaDDGuThNIhdR1Nz1BQSLMAZ5dPiEzCy6vyF6XIdWspZgAynzdSqBT404HJDkM77/70k5omREx28qChgL50OitzesRl/oBsUg14sNV/bstWjP56KQnnt6z2fogZkfEcNc17cTvt8Fk+I7oZzDLIoSUT05G6TJiUkGisrjpclw50d8NzyfRilF594VhXWP9cAPy/H5NtbwZq8SdYdx2k5cxMneOyXFDwVfD//gWBsu+cSY1CNUeiOKCNKbrrAbpdYID92sPrr7zTtTNdpqzAQ8G1hDZuZTlK3D1mD6BdiiW36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c38a1e9a-2f26-401f-a607-687b3b83165", "record_id": "flaws_cloudtrail:0000031:c38a1e9a-2f26-401f-a607-687b3b83165", "row_index": 31, "timestamp": "2017-05-26T22:43:34Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAZPKAENVH2UVAW4I1", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 971, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c38a1e9a-2f26-401f-a607-687b3b83165", "eventTime": "2017-05-26T22:43:34Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAZPKAENVH2UVAW4I1", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:43:33Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b3304c6-7991-414b-adbc-0c99afe06e42", "record_id": "flaws_cloudtrail:0000032:4b3304c6-7991-414b-adbc-0c99afe06e42", "row_index": 32, "timestamp": "2017-05-26T22:43:35Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAKIQ7TV1O0AXVVPCR", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b3304c6-7991-414b-adbc-0c99afe06e42", "eventTime": "2017-05-26T22:43:35Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAKIQ7TV1O0AXVVPCR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:43:34Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d8e049c-8a9a-41bb-b9b7-6f2281a7cb95", "record_id": "flaws_cloudtrail:0000033:7d8e049c-8a9a-41bb-b9b7-6f2281a7cb95", "row_index": 33, "timestamp": "2017-05-26T22:43:35Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d8e049c-8a9a-41bb-b9b7-6f2281a7cb95", "eventTime": "2017-05-26T22:43:35Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA050OXUG18VOY6ARM", "expiration": "May 26, 2017 11:43:35 PM", "sessionToken": "FQoDYXdzECAaDHsUL9ewy9p7rEhTuiLMAYszIcW/mT/xKngfWOaCTZH5Qa3G5a4rtzmbGzlnwbe4Ak55BwDwPxhLdH9bItkHwD4eKPcD0qZT0KuOAMdaka10+2N2zFFSt/n0/MYU1VtQyiBxO+kmnuPRobLjy3of7ySRwTA0AgucPoRpJDLYgMBDthorSssiGalcpgaNbK6qmjkPze1MYViQXNK3Y6ZZHaoks8KRxduea13G0RQDxxoKJgpSdhNONd8O+UGlsQNqN27i3p8Tk9QVeMVsM9QcdISrT0E+xqD4SqBgcyiX36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f83ad715-ee37-4b88-b9b7-1e6b178614d15", "record_id": "flaws_cloudtrail:0000034:f83ad715-ee37-4b88-b9b7-1e6b178614d15", "row_index": 34, "timestamp": "2017-05-26T22:43:36Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA050OXUG18VOY6ARM", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f83ad715-ee37-4b88-b9b7-1e6b178614d15", "eventTime": "2017-05-26T22:43:36Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA050OXUG18VOY6ARM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:43:35Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a88396d-b188-4676-bc34-1c90eedc6bf6", "record_id": "flaws_cloudtrail:0000035:a88396d-b188-4676-bc34-1c90eedc6bf6", "row_index": 35, "timestamp": "2017-05-26T22:43:37Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a88396d-b188-4676-bc34-1c90eedc6bf6", "eventTime": "2017-05-26T22:43:37Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAQ4IAQO57BHF8RNNQ", "expiration": "May 26, 2017 11:43:37 PM", "sessionToken": "FQoDYXdzECAaDAOEtupofoQzAw3Q6yLMARyl2HMZ14QKfzY2rW4HCn8J0QtGNxbhrdIORPLUYOHwVr75iD7mJKaoHZu9qsSuO/pGpYhTPH2tHpfl1qN3k5/d2WW4evMM5E9vzbC09MdxGWwMhjdervsJoSs72isAt1BzlTkxhRoJryZGgcdt8HGykA8CtX7Cnsd0xvGSz23BL+C2yi55FVuQUKR5nQ0m5YmyRJGAhlxwTuGoqfcHz9IW5Cm2jgtAG5ZP+HhyqLY2FUdYyGS5v8ldfnXwYXZ30I+OMq3xvNVNDoDJVyiZ36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ecd0f20-abd7-4b06-b413-12b97502", "record_id": "flaws_cloudtrail:0000036:9ecd0f20-abd7-4b06-b413-12b97502", "row_index": 36, "timestamp": "2017-05-26T22:43:38Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAQ4IAQO57BHF8RNNQ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 970, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ecd0f20-abd7-4b06-b413-12b97502", "eventTime": "2017-05-26T22:43:38Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAQ4IAQO57BHF8RNNQ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:43:37Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b37e510-4921-4e1a-8fb2-f6c15c972e08", "record_id": "flaws_cloudtrail:0000037:0b37e510-4921-4e1a-8fb2-f6c15c972e08", "row_index": 37, "timestamp": "2017-05-26T22:43:38Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1455, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b37e510-4921-4e1a-8fb2-f6c15c972e08", "eventTime": "2017-05-26T22:43:38Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAGLB0IVCB87B5LZE1", "expiration": "May 26, 2017 11:43:38 PM", "sessionToken": "FQoDYXdzECAaDEF3+LHVITFQyoIToiLMAXkZ08P/WIiWT3wMXzN6HDH+aECF4GvxJoDOdBy6PF1sgOsK4gszzkA4BG/RyAmO96hgtpbPmiQNHffW88+wZTXSjMZ44SEg/zLfHvBrzYiqPCR1wYCr/UAAzRYekHyJnt5+aDQDfJOC4/4UosOqYTrzEFNhcpi7x0oGooxt3DcFVmBoTKu86/jL7mwj+aXzMYIfOC8NHJDIFg7qviGVdo+wivT7G/HokvnPZjz3hCuwS7WXIbPS+Ra4G9qI7d9k0RRtS+nJg9uAUlM7zCia36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e734d7f-d2ab-4311-9d21-256594b610e", "record_id": "flaws_cloudtrail:0000038:9e734d7f-d2ab-4311-9d21-256594b610e", "row_index": 38, "timestamp": "2017-05-26T22:43:39Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAGLB0IVCB87B5LZE1", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e734d7f-d2ab-4311-9d21-256594b610e", "eventTime": "2017-05-26T22:43:39Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAGLB0IVCB87B5LZE1", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:43:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1cb674d4-75ac-4782-9c29-e014c03bbf8f", "record_id": "flaws_cloudtrail:0000039:1cb674d4-75ac-4782-9c29-e014c03bbf8f", "row_index": 39, "timestamp": "2017-05-26T22:43:39Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1cb674d4-75ac-4782-9c29-e014c03bbf8f", "eventTime": "2017-05-26T22:43:39Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAG3S5FYFM6E4EI41H", "expiration": "May 26, 2017 11:43:39 PM", "sessionToken": "FQoDYXdzECAaDIOqkyvcxxU79XRJTiLMAaYxkj1ATvI9vyk1f/WjdujMtJYRdE1M8Qzwekl+4YY3CXkR4SaRoUkeGtzvUgM54JfUOoQ0axtfkeCYWIc1hCwf1tbuFwiJZzj+pszipItEmABl6MSCbRL3LzWG9gV7ZPe4j4vHlry765rTtF6+89PNDmHW5AjT7rXTzrEKjN7fWKxdZJwTHooGmkyRCKj+cUXwFpfQWyDhKPIM9vrLG1Qd914mTsB3FfvuQGq5MVDyoqv7FqocIRXtKDYpyzQhHbEurojU7nwEPNAgTyib36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de2e8bd2-883a-46fb-b466-08cf570cbffc", "record_id": "flaws_cloudtrail:0000040:de2e8bd2-883a-46fb-b466-08cf570cbffc", "row_index": 40, "timestamp": "2017-05-26T22:43:40Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de2e8bd2-883a-46fb-b466-08cf570cbffc", "eventTime": "2017-05-26T22:43:40Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA05Y5C04KOVU7MSKZ", "expiration": "May 26, 2017 11:43:40 PM", "sessionToken": "FQoDYXdzECAaDK2DzDEu9BNkGJQEjCLMAXqWElKpaGoxXOeZzv07pLHBHzmDRrxxc7LqbyqRnFcpFaImnbafKepk/7YKOnfPrixBqJpNvGfQhPrvmN6Q91G9PucTQ/vp3+KXJVpYedYXuVdRPdUb67onvIHVEP31FStFVMrTt3gHP43QXDPLgbcBS1t0dOYUv1exR98Qs1UAvuoFGc0LH0mevstSk2G90VlxjnGn3Z0xdDbyEakU7buPXuUAdKw8pwSEC5LPDwehP/SINa9Rpt/i2qkHfKwzFkW2OZoMd/xFjOOiUSic36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be8746aa-4906-4046-99d4-8e86574e796", "record_id": "flaws_cloudtrail:0000041:be8746aa-4906-4046-99d4-8e86574e796", "row_index": 41, "timestamp": "2017-05-26T22:43:40Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAG3S5FYFM6E4EI41H", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 973, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be8746aa-4906-4046-99d4-8e86574e796", "eventTime": "2017-05-26T22:43:40Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAG3S5FYFM6E4EI41H", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:43:39Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bac9dd9f-85b2-4525-83a7-79da92a7a468", "record_id": "flaws_cloudtrail:0000042:bac9dd9f-85b2-4525-83a7-79da92a7a468", "row_index": 42, "timestamp": "2017-05-26T22:43:41Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA05Y5C04KOVU7MSKZ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bac9dd9f-85b2-4525-83a7-79da92a7a468", "eventTime": "2017-05-26T22:43:41Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA05Y5C04KOVU7MSKZ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:43:40Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3c0a24d-8296-4150-a876-7f0392c909456", "record_id": "flaws_cloudtrail:0000043:d3c0a24d-8296-4150-a876-7f0392c909456", "row_index": 43, "timestamp": "2017-05-26T22:43:41Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1455, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3c0a24d-8296-4150-a876-7f0392c909456", "eventTime": "2017-05-26T22:43:41Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAH0QVNTDKRXY3IBN8", "expiration": "May 26, 2017 11:43:41 PM", "sessionToken": "FQoDYXdzECAaDBPEHnJ2bkEQ1Cd6AyLMAWq//w1FXv86FKG9WDcSDvFAdqJadN346UuxsRACqk8N9CgZymcwmZyts3BgPV9VzMuFt3UqVQOc7jzH51MlArxl3ymavNBGD6+qMQtPtRWSepVauf2RidHzymuv+Bf+XiJ1OCYEVQYX7lle/8h+cBh29VyScXbUTWXrkA9NlNhKcEMUb13PtTXzsRWS99DmO2rpiL3/aX2OBMj8SddV2+cPiGf5MIj9yZ0VyQ/e95WhjtOnnXBt87o65Y5Ft2lMuG+DKPXeXQhBB1OarCid36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b273378c-f00b-4b45-a2a2-7d7905f4e486", "record_id": "flaws_cloudtrail:0000044:0b273378c-f00b-4b45-a2a2-7d7905f4e486", "row_index": 44, "timestamp": "2017-05-26T22:43:42Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAH0QVNTDKRXY3IBN8", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b273378c-f00b-4b45-a2a2-7d7905f4e486", "eventTime": "2017-05-26T22:43:42Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAH0QVNTDKRXY3IBN8", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:43:41Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "339904-b606-41b8-b9b0-4d492d16199", "record_id": "flaws_cloudtrail:0000045:339904-b606-41b8-b9b0-4d492d16199", "row_index": 45, "timestamp": "2017-05-26T22:43:42Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1451, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "339904-b606-41b8-b9b0-4d492d16199", "eventTime": "2017-05-26T22:43:42Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA5DXPQFGAWSSU0V03", "expiration": "May 26, 2017 11:43:42 PM", "sessionToken": "FQoDYXdzECAaDPC6rYq02M3c8g7XoiLMAXmOGh/LGqPbHkle9h5w6n24nKh5erOILDNYIO7MqIwcn9WkEjd9s6g7nXVw7+yaDKlxesn9gRdEHbkGcDBmwbyJOyC/Zlju+OD+dMhw02lH0KzVxBI08pmooEts2PQmtXjk7coCoZB6kFHrGZ/hzRtPttvAUD70PDpaKbo4Bjdtzt/UYz0CqgquHr+AiTLFiut8jMbIgQ/GH5kvP9j6RJB4sGLTsC16VOcIuKXkpFZeDXjhnbdvfnrcL4A6S4YELno+czpjEtbW79WUiiie36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e259cb04-fe9a-492f-97e5-2831d37996c0", "record_id": "flaws_cloudtrail:0000046:e259cb04-fe9a-492f-97e5-2831d37996c0", "row_index": 46, "timestamp": "2017-05-26T22:43:45Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1455, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e259cb04-fe9a-492f-97e5-2831d37996c0", "eventTime": "2017-05-26T22:43:45Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA44W415Q1EXT5ANCB", "expiration": "May 26, 2017 11:43:45 PM", "sessionToken": "FQoDYXdzECAaDHDu3J6XUS5I5GrlIyLMAUS0cTFPWEdeTQF+RnKHUoXEk4CNr4NIZ4ngorCjzjJk4ViAtMgNFi7z3+l1Re9kw1tyhFWbPvzPjYSX0WsJIB6R257/KnjCkDZ6ByXjvlakyQze9KVdf6n/t+NcyRMvS3iaU1HvMXj8L0bg1vVCHb+RYLGjrgNNVrImhsQuqNL5wlj/jE9CE8gVOISn+yysMUMfRLIQkyHa6FaLWprZ6l1WzmFBvqB5iC78nXHIUqymo+NYHXlgTUUEGnvWIOcPAdlS+OTmqKrIoyM5mSih36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f8880d1-28b0-4d5c-8d10-b650752d0924", "record_id": "flaws_cloudtrail:0000047:6f8880d1-28b0-4d5c-8d10-b650752d0924", "row_index": 47, "timestamp": "2017-05-26T22:43:45Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1450, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f8880d1-28b0-4d5c-8d10-b650752d0924", "eventTime": "2017-05-26T22:43:45Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAITVW6166RS4TC3D5", "expiration": "May 26, 2017 11:43:45 PM", "sessionToken": "FQoDYXdzECAaDCyBH8L1m2ClshC2piLMAa3gv8xOBAmTU+gNYiPdZ+S/C0CBAH/zQgxa0hzHG+0v7yN42opp+wNT62DAqI+YSFlyciAgwIefv3v5uXQAGKrWhdw/g1zejNweo1NNiSBsXvXNC8Ke/RO1gZmj8J2GjZc/3gPus20U28pZmeFssmfZoqUXpTH4Bd1FapULidqCBs0z9G6CZeoPd44nZip/RlyxX97BUpqOvMRhxhjNms+QY1UgiBVdp5/aFP8p+h8B2thhi2MuqCS0DHCWSYb26Gly5KxP/HPonHkh/Cih36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80d63242-3f28-40fa-b045-a41d155a644f", "record_id": "flaws_cloudtrail:0000048:80d63242-3f28-40fa-b045-a41d155a644f", "row_index": 48, "timestamp": "2017-05-26T22:43:45Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA44W415Q1EXT5ANCB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80d63242-3f28-40fa-b045-a41d155a644f", "eventTime": "2017-05-26T22:43:45Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA44W415Q1EXT5ANCB", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:43:45Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0604c673-084b-42a0-b3ec-43ad12d9e352", "record_id": "flaws_cloudtrail:0000049:0604c673-084b-42a0-b3ec-43ad12d9e352", "row_index": 49, "timestamp": "2017-05-26T22:43:46Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0604c673-084b-42a0-b3ec-43ad12d9e352", "eventTime": "2017-05-26T22:43:46Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA2XIJ4ISMUHHCXESP", "expiration": "May 26, 2017 11:43:46 PM", "sessionToken": "FQoDYXdzECAaDGvgjjrzkmRMmdAAPSLMAdFOP7aQGPbFQkEBRhwcrmm6uqVHChKAqdg+cldPf8BQdLaj9qf3//XeiRIBHO5omx0/RhnVnvdXR0Rf+rfgoW7KiUhrhevI0cT3s+6aNrLcAKBst84ny/6Bl/LAhT8K3Y3HUuEiPNVJ9BwJi0PD+rpaPWJ7NGsdulqYzDHp/R3asMjcacvM8+VlXtmmh2ctWVG1KyiSEi8Ww8lQKj9XrWLB1RWe9C+h2bq3YNt/lBeRqPGKtGlEKmaEc5K4FjkaboY/IlgVEH8DuQLfKSii36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28cd8c56-8f53-483e-8354-6fb526d2cb59", "record_id": "flaws_cloudtrail:0000050:28cd8c56-8f53-483e-8354-6fb526d2cb59", "row_index": 50, "timestamp": "2017-05-26T22:43:48Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA2XIJ4ISMUHHCXESP", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28cd8c56-8f53-483e-8354-6fb526d2cb59", "eventTime": "2017-05-26T22:43:48Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA2XIJ4ISMUHHCXESP", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:43:46Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f16908c-d69e-431e-937d-cfc16be93d97", "record_id": "flaws_cloudtrail:0000051:f16908c-d69e-431e-937d-cfc16be93d97", "row_index": 51, "timestamp": "2017-05-26T22:43:48Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f16908c-d69e-431e-937d-cfc16be93d97", "eventTime": "2017-05-26T22:43:48Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA06WBSV07PC9OIT9O", "expiration": "May 26, 2017 11:43:48 PM", "sessionToken": "FQoDYXdzECAaDCKkjreEyQGhaM8yRiLMAaYKMEVjUU9wsMaI159SdniSEikZauodUd7uIH8j8kWH9hUz2uXZDzg0hn3+eK/q1uUyH84ORgWaHpMMWlK3HfSIiDWVJJLpI7/ak9gEdsj88N3JbcyQlnOMxd5AyrCmQn7DPc6U3noweqs9BCVUpnbSSiE2TSL/AkYLcnCjQedRibTsSzqwRbQ0aNGCHGg2ffqPHeuFnNGB2rPyjse4mAxWM4y7qTO4ZvaJiU/wqub2fA0SezWLxb4tZMziwOFwLJB4orKmi3+n3Jmeqiik36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac6d3a25-aac2-417a-a6ab-3f7a6201f05e", "record_id": "flaws_cloudtrail:0000052:ac6d3a25-aac2-417a-a6ab-3f7a6201f05e", "row_index": 52, "timestamp": "2017-05-26T22:43:49Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA06WBSV07PC9OIT9O", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac6d3a25-aac2-417a-a6ab-3f7a6201f05e", "eventTime": "2017-05-26T22:43:49Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA06WBSV07PC9OIT9O", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:43:48Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c023e00f-141e-4e44-b786-ad6909f652917", "record_id": "flaws_cloudtrail:0000053:c023e00f-141e-4e44-b786-ad6909f652917", "row_index": 53, "timestamp": "2017-05-26T22:43:49Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1450, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c023e00f-141e-4e44-b786-ad6909f652917", "eventTime": "2017-05-26T22:43:49Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA6BJZXXHT3GVT1DUN", "expiration": "May 26, 2017 11:43:49 PM", "sessionToken": "FQoDYXdzECAaDMHadaYXztPsTxGWCSLMAaeTHTtOyIOKuwdw8N2ND7VXUf99C0EiNvYoR4QbFBHKqc7Qf+52xJuKg8TmD+f5NUohn0aOygXgtQZ8SD/rY6NNvBx9wh9liXnVhJU9ZDqeQP6eC7M1A18WM3ohWt5PJK796vT+bWH41rJPaMHcFmslMufFjFUbaqfZcRT0aiEUV9XDAW8+0NcA0A7BlB064GixP2kNrD8Y39EeOuBpZ3BIzTvH1n2GtfNIm061nZZM92a1MhQ2HOVP3B3VCu7cGPZ6scI1nHUNDsVKjyil36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47b6451b-5ac5-46df-873f-50f4bc839b30", "record_id": "flaws_cloudtrail:0000054:47b6451b-5ac5-46df-873f-50f4bc839b30", "row_index": 54, "timestamp": "2017-05-26T22:43:50Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA6BJZXXHT3GVT1DUN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47b6451b-5ac5-46df-873f-50f4bc839b30", "eventTime": "2017-05-26T22:43:50Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA6BJZXXHT3GVT1DUN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:43:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88608c8-d29a-40ed-bf01-1d52951e50", "record_id": "flaws_cloudtrail:0000055:88608c8-d29a-40ed-bf01-1d52951e50", "row_index": 55, "timestamp": "2017-05-26T22:43:50Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1447, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88608c8-d29a-40ed-bf01-1d52951e50", "eventTime": "2017-05-26T22:43:50Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAM31G03MLT6BCYDAE", "expiration": "May 26, 2017 11:43:50 PM", "sessionToken": "FQoDYXdzECAaDA9rI4p/V8D44MhpMyLMATPht1c0FGkOEQy4YM8UltZ7KcP3/H/zt4m5/RVjX/5+zoE2ZbL3FDhoXR2rBCP673AUUYVOgJ113ykCARH20ec0eXvOL+mtQSrq54zZ37C7RbgRWU3bVefbAnZI6QcKq7V/RUFyBkXjOWqjcxKcygaBdMYhGIaZt8hXtHqlr/fdHbt4/keMeuwxOwaJ2u4sgLXpx9HLbbVuyyKGGt/E6pSaL0SFseD+W+te+FDfG1NzQwlRASPOCkpTy4hgjtffFlGq9KoAxenlYgVVySim36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "550f0d6d-7d7c-4ba9-ba3f-98ef20318153", "record_id": "flaws_cloudtrail:0000056:550f0d6d-7d7c-4ba9-ba3f-98ef20318153", "row_index": 56, "timestamp": "2017-05-26T22:43:51Z", "event_type": "DescribeDBClusters", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAM31G03MLT6BCYDAE", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "550f0d6d-7d7c-4ba9-ba3f-98ef20318153", "eventTime": "2017-05-26T22:43:51Z", "eventName": "DescribeDBClusters", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAM31G03MLT6BCYDAE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:43:50Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c5dc0e7-6a59-4516-903c-7912c272e568", "record_id": "flaws_cloudtrail:0000057:1c5dc0e7-6a59-4516-903c-7912c272e568", "row_index": 57, "timestamp": "2017-05-26T22:43:52Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c5dc0e7-6a59-4516-903c-7912c272e568", "eventTime": "2017-05-26T22:43:52Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIASLD2V1H2CCJL2RUZ", "expiration": "May 26, 2017 11:43:52 PM", "sessionToken": "FQoDYXdzECAaDM7cr6dCziEVz7VCpiLMARtOXV9SFRy48onep9yyxOQ6MEy94Z3uQ60fbV1JQiQHGxMRBWZi5fZLy/Z6QPwE3kkgDAhf0wn9zj6AQEXjFw3md6HQJjcjOD7f3jBrVLiI6dEgTA4G8kYeWwS6ppTN6L8687JJAdjiUFWtkuY2rGcEidZJiFM+m/AOg3bQm00XE88GA6bfqPC/MHEql0opQ4cwJY40b2MNe4mZilSluBquyOjFueQZud3Dm0nBYOKfXeZZEQvydUsEemPy7Me53tInsSADFhA3o/JjYyio36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4e614b5-2027-4aa8-9dc8-022fc38b4b40", "record_id": "flaws_cloudtrail:0000058:f4e614b5-2027-4aa8-9dc8-022fc38b4b40", "row_index": 58, "timestamp": "2017-05-26T22:43:53Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIASLD2V1H2CCJL2RUZ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4e614b5-2027-4aa8-9dc8-022fc38b4b40", "eventTime": "2017-05-26T22:43:53Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIASLD2V1H2CCJL2RUZ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:43:52Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "011bacb5-f6b3-4c4a-8711-e4c9f77d181a", "record_id": "flaws_cloudtrail:0000059:011bacb5-f6b3-4c4a-8711-e4c9f77d181a", "row_index": 59, "timestamp": "2017-05-26T22:43:54Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIASLD2V1H2CCJL2RUZ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "011bacb5-f6b3-4c4a-8711-e4c9f77d181a", "eventTime": "2017-05-26T22:43:54Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIASLD2V1H2CCJL2RUZ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:43:52Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88c0ceec-6e67-4190-acd7-d881087ee02d", "record_id": "flaws_cloudtrail:0000060:88c0ceec-6e67-4190-acd7-d881087ee02d", "row_index": 60, "timestamp": "2017-05-26T22:43:55Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIASLD2V1H2CCJL2RUZ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1004, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88c0ceec-6e67-4190-acd7-d881087ee02d", "eventTime": "2017-05-26T22:43:55Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIASLD2V1H2CCJL2RUZ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:43:52Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf6cfde6-276e-45ea-8871-321720f1e5a", "record_id": "flaws_cloudtrail:0000061:cf6cfde6-276e-45ea-8871-321720f1e5a", "row_index": 61, "timestamp": "2017-05-26T22:43:57Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIASLD2V1H2CCJL2RUZ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf6cfde6-276e-45ea-8871-321720f1e5a", "eventTime": "2017-05-26T22:43:57Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIASLD2V1H2CCJL2RUZ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:43:52Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d8d5313-c790-4338-830f-4ac2c862e434", "record_id": "flaws_cloudtrail:0000062:9d8d5313-c790-4338-830f-4ac2c862e434", "row_index": 62, "timestamp": "2017-05-26T22:43:58Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIASLD2V1H2CCJL2RUZ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d8d5313-c790-4338-830f-4ac2c862e434", "eventTime": "2017-05-26T22:43:58Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIASLD2V1H2CCJL2RUZ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:43:52Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d641591ce-476b-46de-8e82-a8b7d7febf35", "record_id": "flaws_cloudtrail:0000063:d641591ce-476b-46de-8e82-a8b7d7febf35", "row_index": 63, "timestamp": "2017-05-26T22:43:59Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIASLD2V1H2CCJL2RUZ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1007, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d641591ce-476b-46de-8e82-a8b7d7febf35", "eventTime": "2017-05-26T22:43:59Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIASLD2V1H2CCJL2RUZ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:43:52Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f3b723a-8ece-4ad1-8256-b5b3737bfc1e", "record_id": "flaws_cloudtrail:0000064:0f3b723a-8ece-4ad1-8256-b5b3737bfc1e", "row_index": 64, "timestamp": "2017-05-26T22:44:00Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIASLD2V1H2CCJL2RUZ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1006, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f3b723a-8ece-4ad1-8256-b5b3737bfc1e", "eventTime": "2017-05-26T22:44:00Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIASLD2V1H2CCJL2RUZ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:43:52Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a575868-09ae-4c66-a0dc-230ca9c8c64b", "record_id": "flaws_cloudtrail:0000065:7a575868-09ae-4c66-a0dc-230ca9c8c64b", "row_index": 65, "timestamp": "2017-05-26T22:44:01Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIASLD2V1H2CCJL2RUZ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1003, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a575868-09ae-4c66-a0dc-230ca9c8c64b", "eventTime": "2017-05-26T22:44:01Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIASLD2V1H2CCJL2RUZ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:43:52Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84fb9552-983d-48a4-8543-d8abd0e87dcf", "record_id": "flaws_cloudtrail:0000066:84fb9552-983d-48a4-8543-d8abd0e87dcf", "row_index": 66, "timestamp": "2017-05-26T22:44:01Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIASLD2V1H2CCJL2RUZ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1003, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84fb9552-983d-48a4-8543-d8abd0e87dcf", "eventTime": "2017-05-26T22:44:01Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIASLD2V1H2CCJL2RUZ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:43:52Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1bc7f824-c7c7-46be-88b7-3b8a7c49328c", "record_id": "flaws_cloudtrail:0000067:1bc7f824-c7c7-46be-88b7-3b8a7c49328c", "row_index": 67, "timestamp": "2017-05-26T22:44:02Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIASLD2V1H2CCJL2RUZ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1001, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1bc7f824-c7c7-46be-88b7-3b8a7c49328c", "eventTime": "2017-05-26T22:44:02Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIASLD2V1H2CCJL2RUZ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:43:52Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be6699c7-37db-4ea3-9d30-882618cfde", "record_id": "flaws_cloudtrail:0000068:be6699c7-37db-4ea3-9d30-882618cfde", "row_index": 68, "timestamp": "2017-05-26T22:44:03Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIASLD2V1H2CCJL2RUZ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1002, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be6699c7-37db-4ea3-9d30-882618cfde", "eventTime": "2017-05-26T22:44:03Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIASLD2V1H2CCJL2RUZ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:43:52Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b516e55-dae5-47a0-9573-83d898e92bc5", "record_id": "flaws_cloudtrail:0000069:4b516e55-dae5-47a0-9573-83d898e92bc5", "row_index": 69, "timestamp": "2017-05-26T22:44:04Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIASLD2V1H2CCJL2RUZ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1003, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b516e55-dae5-47a0-9573-83d898e92bc5", "eventTime": "2017-05-26T22:44:04Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIASLD2V1H2CCJL2RUZ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:43:52Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0b8af0f-f210-4ca6-ac0e-cda49cb737b8", "record_id": "flaws_cloudtrail:0000070:d0b8af0f-f210-4ca6-ac0e-cda49cb737b8", "row_index": 70, "timestamp": "2017-05-26T22:44:04Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIASLD2V1H2CCJL2RUZ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1003, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0b8af0f-f210-4ca6-ac0e-cda49cb737b8", "eventTime": "2017-05-26T22:44:04Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIASLD2V1H2CCJL2RUZ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:43:52Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "804dd7f0-86ca-49a7-aded-bcc238e77732", "record_id": "flaws_cloudtrail:0000071:804dd7f0-86ca-49a7-aded-bcc238e77732", "row_index": 71, "timestamp": "2017-05-26T22:44:05Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1447, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "804dd7f0-86ca-49a7-aded-bcc238e77732", "eventTime": "2017-05-26T22:44:05Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "cloudaux"}, "responseElements": {"credentials": {"accessKeyId": "ASIAKE5EB37RXF0TYRGH", "expiration": "May 26, 2017 11:44:05 PM", "sessionToken": "FQoDYXdzECAaDFXYUny534UXZn5qpSLLASgpcniTmiX5AWlIwI92rAxYOzejgOe+3XWoJdtOCytVBPTnyhDS7NxivmQQqptJCk0wTDrMcf9mAxp5zkbbl2YY7xjkdkE0OErR65Mt6SBT566DLWykYUYYYhGt84CHMdvrUd6hMkp6pTFbNxk2vYKrNmoiF8ohFxloERSCM6SMwuNkrw6J7vNXUxEfxH46iJoof5p1jmuh7q7tEe5DMh/B/mZH6+rDuSOoGPkn933RFefSQYkdQ5bpUxoBizM7MQqfm/fBsA3bTKaGKLXfoskF"}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "321924c-560d-4340-a55a-88e40ecb0765", "record_id": "flaws_cloudtrail:0000072:321924c-560d-4340-a55a-88e40ecb0765", "row_index": 72, "timestamp": "2017-05-26T22:44:05Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIASLD2V1H2CCJL2RUZ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1002, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "321924c-560d-4340-a55a-88e40ecb0765", "eventTime": "2017-05-26T22:44:05Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIASLD2V1H2CCJL2RUZ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:43:52Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f79581-0fb2-4224-996d-2b8082444290", "record_id": "flaws_cloudtrail:0000073:5f79581-0fb2-4224-996d-2b8082444290", "row_index": 73, "timestamp": "2017-05-26T22:44:06Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAKE5EB37RXF0TYRGH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f79581-0fb2-4224-996d-2b8082444290", "eventTime": "2017-05-26T22:44:06Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAKE5EB37RXF0TYRGH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b97b53ae-addb-40d5-9977-ea0096eb05eb", "record_id": "flaws_cloudtrail:0000074:b97b53ae-addb-40d5-9977-ea0096eb05eb", "row_index": 74, "timestamp": "2017-05-26T22:44:06Z", "event_type": "ListSigningCertificates", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAKE5EB37RXF0TYRGH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 994, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b97b53ae-addb-40d5-9977-ea0096eb05eb", "eventTime": "2017-05-26T22:44:06Z", "eventName": "ListSigningCertificates", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAKE5EB37RXF0TYRGH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24d32ae8-da2e-4533-b048-29b86c707605", "record_id": "flaws_cloudtrail:0000075:24d32ae8-da2e-4533-b048-29b86c707605", "row_index": 75, "timestamp": "2017-05-26T22:44:06Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAKE5EB37RXF0TYRGH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 995, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24d32ae8-da2e-4533-b048-29b86c707605", "eventTime": "2017-05-26T22:44:06Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAKE5EB37RXF0TYRGH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de4d8440-7fb5-4762-b1ae-8adad0c632d6", "record_id": "flaws_cloudtrail:0000076:de4d8440-7fb5-4762-b1ae-8adad0c632d6", "row_index": 76, "timestamp": "2017-05-26T22:44:06Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAKE5EB37RXF0TYRGH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 986, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de4d8440-7fb5-4762-b1ae-8adad0c632d6", "eventTime": "2017-05-26T22:44:06Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAKE5EB37RXF0TYRGH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bccf8dc9-bab8-4408-8e1c-2241da624919", "record_id": "flaws_cloudtrail:0000077:bccf8dc9-bab8-4408-8e1c-2241da624919", "row_index": 77, "timestamp": "2017-05-26T22:44:06Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAKE5EB37RXF0TYRGH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 987, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bccf8dc9-bab8-4408-8e1c-2241da624919", "eventTime": "2017-05-26T22:44:06Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAKE5EB37RXF0TYRGH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2bd952ee-24bc-4f38-a844-3d0b5222a3c6", "record_id": "flaws_cloudtrail:0000078:2bd952ee-24bc-4f38-a844-3d0b5222a3c6", "row_index": 78, "timestamp": "2017-05-26T22:44:06Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAKE5EB37RXF0TYRGH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 987, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2bd952ee-24bc-4f38-a844-3d0b5222a3c6", "eventTime": "2017-05-26T22:44:06Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAKE5EB37RXF0TYRGH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83221c-dda7-4f5e-b15d-ccb9c123ec6a", "record_id": "flaws_cloudtrail:0000079:83221c-dda7-4f5e-b15d-ccb9c123ec6a", "row_index": 79, "timestamp": "2017-05-26T22:44:06Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAKE5EB37RXF0TYRGH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 961, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83221c-dda7-4f5e-b15d-ccb9c123ec6a", "eventTime": "2017-05-26T22:44:06Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAKE5EB37RXF0TYRGH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98a52b8b-fedf-4e23-a5ce-cf4208b5c6cc", "record_id": "flaws_cloudtrail:0000080:98a52b8b-fedf-4e23-a5ce-cf4208b5c6cc", "row_index": 80, "timestamp": "2017-05-26T22:44:06Z", "event_type": "GetLoginProfile", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAKE5EB37RXF0TYRGH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98a52b8b-fedf-4e23-a5ce-cf4208b5c6cc", "eventTime": "2017-05-26T22:44:06Z", "eventName": "GetLoginProfile", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "Cannot find Login Profile for User backup", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAKE5EB37RXF0TYRGH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0be8ccd-d822-4fa1-b687-39719e846dd", "record_id": "flaws_cloudtrail:0000081:b0be8ccd-d822-4fa1-b687-39719e846dd", "row_index": 81, "timestamp": "2017-05-26T22:44:06Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAKE5EB37RXF0TYRGH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0be8ccd-d822-4fa1-b687-39719e846dd", "eventTime": "2017-05-26T22:44:06Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAKE5EB37RXF0TYRGH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18c78faa-0d16-4e12-8d2f-32d3948d9f25", "record_id": "flaws_cloudtrail:0000082:18c78faa-0d16-4e12-8d2f-32d3948d9f25", "row_index": 82, "timestamp": "2017-05-26T22:44:06Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAKE5EB37RXF0TYRGH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 995, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18c78faa-0d16-4e12-8d2f-32d3948d9f25", "eventTime": "2017-05-26T22:44:06Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAKE5EB37RXF0TYRGH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e6ce6b2-53c8-4960-b708-ebbf1790e522", "record_id": "flaws_cloudtrail:0000083:0e6ce6b2-53c8-4960-b708-ebbf1790e522", "row_index": 83, "timestamp": "2017-05-26T22:44:07Z", "event_type": "GetLoginProfile", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAKE5EB37RXF0TYRGH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e6ce6b2-53c8-4960-b708-ebbf1790e522", "eventTime": "2017-05-26T22:44:07Z", "eventName": "GetLoginProfile", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "Cannot find Login Profile for User Level6", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAKE5EB37RXF0TYRGH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ce6b808-b281-4674-9c05-eb059d4d14cc", "record_id": "flaws_cloudtrail:0000084:2ce6b808-b281-4674-9c05-eb059d4d14cc", "row_index": 84, "timestamp": "2017-05-26T22:44:07Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAKE5EB37RXF0TYRGH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ce6b808-b281-4674-9c05-eb059d4d14cc", "eventTime": "2017-05-26T22:44:07Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAKE5EB37RXF0TYRGH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a974c9a7-35e7-4d95-8845-801483e0803a", "record_id": "flaws_cloudtrail:0000085:a974c9a7-35e7-4d95-8845-801483e0803a", "row_index": 85, "timestamp": "2017-05-26T22:44:07Z", "event_type": "ListSigningCertificates", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAKE5EB37RXF0TYRGH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 993, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a974c9a7-35e7-4d95-8845-801483e0803a", "eventTime": "2017-05-26T22:44:07Z", "eventName": "ListSigningCertificates", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAKE5EB37RXF0TYRGH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"userName": "piper"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d46c6e8-4971-468e-8c1f-92ed76371d52", "record_id": "flaws_cloudtrail:0000086:7d46c6e8-4971-468e-8c1f-92ed76371d52", "row_index": 86, "timestamp": "2017-05-26T22:44:07Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAKE5EB37RXF0TYRGH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d46c6e8-4971-468e-8c1f-92ed76371d52", "eventTime": "2017-05-26T22:44:07Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAKE5EB37RXF0TYRGH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"userName": "piper"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0362a4a1-3097-4b21-8a83-b3dbbfbc4278", "record_id": "flaws_cloudtrail:0000087:0362a4a1-3097-4b21-8a83-b3dbbfbc4278", "row_index": 87, "timestamp": "2017-05-26T22:44:07Z", "event_type": "GetLoginProfile", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAKE5EB37RXF0TYRGH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0362a4a1-3097-4b21-8a83-b3dbbfbc4278", "eventTime": "2017-05-26T22:44:07Z", "eventName": "GetLoginProfile", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAKE5EB37RXF0TYRGH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"userName": "piper"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b0cb2ff-bd75-4b9d-80a3-117048c5e2", "record_id": "flaws_cloudtrail:0000088:7b0cb2ff-bd75-4b9d-80a3-117048c5e2", "row_index": 88, "timestamp": "2017-05-26T22:44:07Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAKE5EB37RXF0TYRGH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 983, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b0cb2ff-bd75-4b9d-80a3-117048c5e2", "eventTime": "2017-05-26T22:44:07Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAKE5EB37RXF0TYRGH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"userName": "piper"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39389e0d-fdd7-446b-831d-116e8fa78e22", "record_id": "flaws_cloudtrail:0000089:39389e0d-fdd7-446b-831d-116e8fa78e22", "row_index": 89, "timestamp": "2017-05-26T22:44:07Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAKE5EB37RXF0TYRGH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 994, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39389e0d-fdd7-446b-831d-116e8fa78e22", "eventTime": "2017-05-26T22:44:07Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAKE5EB37RXF0TYRGH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"userName": "piper"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04536e-a132-4a59-9bb3-39ed397074c6", "record_id": "flaws_cloudtrail:0000090:04536e-a132-4a59-9bb3-39ed397074c6", "row_index": 90, "timestamp": "2017-05-26T22:44:07Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAKE5EB37RXF0TYRGH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04536e-a132-4a59-9bb3-39ed397074c6", "eventTime": "2017-05-26T22:44:07Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAKE5EB37RXF0TYRGH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"userName": "piper"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10eed069-84b3-48ef-9f57-8b1b2c96839c", "record_id": "flaws_cloudtrail:0000091:10eed069-84b3-48ef-9f57-8b1b2c96839c", "row_index": 91, "timestamp": "2017-05-26T22:44:07Z", "event_type": "ListSigningCertificates", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAKE5EB37RXF0TYRGH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 994, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10eed069-84b3-48ef-9f57-8b1b2c96839c", "eventTime": "2017-05-26T22:44:07Z", "eventName": "ListSigningCertificates", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAKE5EB37RXF0TYRGH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f940ff2e-4730-48a4-a3d1-1ca709d4eb45", "record_id": "flaws_cloudtrail:0000092:f940ff2e-4730-48a4-a3d1-1ca709d4eb45", "row_index": 92, "timestamp": "2017-05-26T22:44:08Z", "event_type": "ListSigningCertificates", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAKE5EB37RXF0TYRGH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1001, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f940ff2e-4730-48a4-a3d1-1ca709d4eb45", "eventTime": "2017-05-26T22:44:08Z", "eventName": "ListSigningCertificates", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAKE5EB37RXF0TYRGH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"userName": "SecurityMokey"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c9e3fcc-89e6-4b2d-b9df-6d4f00003c95", "record_id": "flaws_cloudtrail:0000093:8c9e3fcc-89e6-4b2d-b9df-6d4f00003c95", "row_index": 93, "timestamp": "2017-05-26T22:44:08Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAKE5EB37RXF0TYRGH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1002, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c9e3fcc-89e6-4b2d-b9df-6d4f00003c95", "eventTime": "2017-05-26T22:44:08Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAKE5EB37RXF0TYRGH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"userName": "SecurityMokey"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13c8f83c-659a-4ccf-af93-929980d753fb7", "record_id": "flaws_cloudtrail:0000094:13c8f83c-659a-4ccf-af93-929980d753fb7", "row_index": 94, "timestamp": "2017-05-26T22:44:08Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAKE5EB37RXF0TYRGH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 995, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13c8f83c-659a-4ccf-af93-929980d753fb7", "eventTime": "2017-05-26T22:44:08Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAKE5EB37RXF0TYRGH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"userName": "SecurityMokey"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9eb27b6-fb9f-4b95-9ef3-d1ec94b6cca3", "record_id": "flaws_cloudtrail:0000095:a9eb27b6-fb9f-4b95-9ef3-d1ec94b6cca3", "row_index": 95, "timestamp": "2017-05-26T22:44:08Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAKE5EB37RXF0TYRGH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 992, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9eb27b6-fb9f-4b95-9ef3-d1ec94b6cca3", "eventTime": "2017-05-26T22:44:08Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAKE5EB37RXF0TYRGH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"userName": "SecurityMokey"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc7503f5-7e54-480f-8621-443ed95225d", "record_id": "flaws_cloudtrail:0000096:bc7503f5-7e54-480f-8621-443ed95225d", "row_index": 96, "timestamp": "2017-05-26T22:44:08Z", "event_type": "GetLoginProfile", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAKE5EB37RXF0TYRGH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1094, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc7503f5-7e54-480f-8621-443ed95225d", "eventTime": "2017-05-26T22:44:08Z", "eventName": "GetLoginProfile", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "Cannot find Login Profile for User SecurityMokey", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAKE5EB37RXF0TYRGH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"userName": "SecurityMokey"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf139dae-5a88-4c82-8d59-746c6a33a01f", "record_id": "flaws_cloudtrail:0000097:cf139dae-5a88-4c82-8d59-746c6a33a01f", "row_index": 97, "timestamp": "2017-05-26T22:44:08Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAKE5EB37RXF0TYRGH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 990, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf139dae-5a88-4c82-8d59-746c6a33a01f", "eventTime": "2017-05-26T22:44:08Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAKE5EB37RXF0TYRGH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"userName": "SecurityMokey"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a8a48c4-b99a-48eb-962e-d62f273c5969", "record_id": "flaws_cloudtrail:0000098:7a8a48c4-b99a-48eb-962e-d62f273c5969", "row_index": 98, "timestamp": "2017-05-26T22:44:09Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a8a48c4-b99a-48eb-962e-d62f273c5969", "eventTime": "2017-05-26T22:44:09Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAVM1XKBSZK2JS42W2", "expiration": "May 26, 2017 11:44:09 PM", "sessionToken": "FQoDYXdzECAaDExAtqaXBWIKGMIy9CLMAQqT/ydQYrrnXda/ZfuRS/ykNtFXmUZY2jV83/zcgt/25s8P2Xpt3JdjThREZH5yNU1fA/eob14/GK+UCi/BvahDNmq7g1R7mfhSu8bSCEUj1Td7LFS0CV4dsw26nWboPYQuM9Y/6zgUdCCtpNscC7ZSTuV/cyL0mivw4fSIsAY7VZCCeW+wlI+X09kR93VzWg//m6LzHaGq0S4W9LrCCfuSNOEJuFAYQV7WJoV3VNp5q/rcqzitKShorklh2eg84hWbIqOBuezgcctJdSi536LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20b990dc-2c44-44d6-a2e5-cd998169fc06d", "record_id": "flaws_cloudtrail:0000099:20b990dc-2c44-44d6-a2e5-cd998169fc06d", "row_index": 99, "timestamp": "2017-05-26T22:44:09Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1455, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20b990dc-2c44-44d6-a2e5-cd998169fc06d", "eventTime": "2017-05-26T22:44:09Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAWE3CHPN7MG4FQIWO", "expiration": "May 26, 2017 11:44:09 PM", "sessionToken": "FQoDYXdzECAaDGA6ileJXYDbSclA/SLMAZVOktYedPIfkCuVQKf5u/+7I1P/HfgERHhvATYbzagPfBxohKbtcjXyIlBSAvKYgVGeJ/FikiqvBb0Ij+bymz6CXH67skpFKTPCcI8N26wkSoZ/0eWCiueicF5hNVJeY0OME+nEiWEW8CvjGIyB9piPQK6MOxg4sys7pRlqSFWgUdGAQzihATdsLU3NkblACnZF79McuHtDGEWghGKbTJMG9CEJyYEYYete59PiPX0IW0ppHdmhondsqLZNkpEuPgqRcEMqd8rK2o9jTyi536LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d21be6f0-70fe-45f1-ac87-a5ca9d2a437e", "record_id": "flaws_cloudtrail:0000100:d21be6f0-70fe-45f1-ac87-a5ca9d2a437e", "row_index": 100, "timestamp": "2017-05-26T22:44:10Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAVM1XKBSZK2JS42W2", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 994, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d21be6f0-70fe-45f1-ac87-a5ca9d2a437e", "eventTime": "2017-05-26T22:44:10Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAVM1XKBSZK2JS42W2", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:09Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "882cdd4d-3f0b-4488-9f3b-7628354ff34c", "record_id": "flaws_cloudtrail:0000101:882cdd4d-3f0b-4488-9f3b-7628354ff34c", "row_index": 101, "timestamp": "2017-05-26T22:44:10Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "882cdd4d-3f0b-4488-9f3b-7628354ff34c", "eventTime": "2017-05-26T22:44:10Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAPK94THDX3BS1I7YP", "expiration": "May 26, 2017 11:44:10 PM", "sessionToken": "FQoDYXdzECAaDFeKZBQykBaZL+3cHiLMAaUzix6hS9fxWzhp/X0a0nGIf5VgpjUKKzPwyeezjVfOz7ob9g0QWdePI4C85xQo+h2rRiKJiCJhJJYW1dvDNkEaBfem00r25dtsKxVCobl8vj9j4JnZZAozn2jkRXpAfUEEZ6zd31mCkmn2NxcJLWmT2G34boZNRLILjhqMcE2ythRyokCD2HkAW0IbZd0nIdCFXZLedmz03Gw0YHJUFGyWbGRt9HIS77SIbxdzhl7LKWmG9Tnp52Z9egF/TVQWrxO1n4DIFTckLhqJoii636LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d5ad968-f5bb-422d-be75-999744cae7c9", "record_id": "flaws_cloudtrail:0000102:6d5ad968-f5bb-422d-be75-999744cae7c9", "row_index": 102, "timestamp": "2017-05-26T22:44:11Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAPK94THDX3BS1I7YP", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 994, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d5ad968-f5bb-422d-be75-999744cae7c9", "eventTime": "2017-05-26T22:44:11Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAPK94THDX3BS1I7YP", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:10Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "485707f-2778-44b3-9499-01919e88fca", "record_id": "flaws_cloudtrail:0000103:485707f-2778-44b3-9499-01919e88fca", "row_index": 103, "timestamp": "2017-05-26T22:44:12Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "485707f-2778-44b3-9499-01919e88fca", "eventTime": "2017-05-26T22:44:12Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAVDASYRDT5YL4IES9", "expiration": "May 26, 2017 11:44:12 PM", "sessionToken": "FQoDYXdzECAaDBh1wAe+Nnd+SLWygCLMAbFdktTmuUXSpOdI1HDWUE8M8c3u1uHFmkJWRMRYCM436s6/Z0hfwf1KcR1XPN/HooCmbvncSMgBj31Gb7hYLBmh7cnvxZkQ0WcJtqge2SyN7XkHsJTKnxknYIlN6uqRWeItYakcAMznHTaoXReuP/tS1PP23IAcXNov31yuBJyFzRiL9wga8Ac+S7iBFQhdX2f1rkiMg2H+dqeCHq5mp4h6xaBMXsYFi/9lYZFtdXU1sLHgKM+NLNvyoF3OM5+8kmRIFsr2PjvpWRQJECi836LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd47f055-aaaf-4adc-a526-11c074f7d38e", "record_id": "flaws_cloudtrail:0000104:dd47f055-aaaf-4adc-a526-11c074f7d38e", "row_index": 104, "timestamp": "2017-05-26T22:44:13Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAVDASYRDT5YL4IES9", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 989, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd47f055-aaaf-4adc-a526-11c074f7d38e", "eventTime": "2017-05-26T22:44:13Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAVDASYRDT5YL4IES9", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:12Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab5c7613-dfdb-4df6-96ff-f4e03ed456b8", "record_id": "flaws_cloudtrail:0000105:ab5c7613-dfdb-4df6-96ff-f4e03ed456b8", "row_index": 105, "timestamp": "2017-05-26T22:44:13Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab5c7613-dfdb-4df6-96ff-f4e03ed456b8", "eventTime": "2017-05-26T22:44:13Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAP2WMO6GUYC56QN0K", "expiration": "May 26, 2017 11:44:13 PM", "sessionToken": "FQoDYXdzECAaDC2jfjFJcOygEgjmFSLMAWJRMQDGx1E8r2PG9YMGQfyhcXVhPk14B0I86BgE1LCiRpwORgoNpc0gR7e+NPcWu/Z7bewMQ0oRV0rbuXifq1/BUvihIdj9/nkfOehkWXKCx3lWnLkL3LSEQkBScEkVwzRO9lCTtO4CrQmDvh5KHzEtI7zbpsCFHSi3bl9FllwrrdW+Lj3A7akh6jWrGhIaDZiU1HowHS8Eq6xPGOD8HQz5MLvs/zyGV2thVWqo22p0RyZ4F7lBawVM49GUlr94OJRL78+gH+8e0EvBbii936LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33194b7-b3bc-475c-aa03-9a480da757d7", "record_id": "flaws_cloudtrail:0000106:33194b7-b3bc-475c-aa03-9a480da757d7", "row_index": 106, "timestamp": "2017-05-26T22:44:15Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAP2WMO6GUYC56QN0K", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 993, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33194b7-b3bc-475c-aa03-9a480da757d7", "eventTime": "2017-05-26T22:44:15Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAP2WMO6GUYC56QN0K", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:13Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5cfb5797-a9be-432e-aaee-70924c27dd05", "record_id": "flaws_cloudtrail:0000107:5cfb5797-a9be-432e-aaee-70924c27dd05", "row_index": 107, "timestamp": "2017-05-26T22:44:15Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5cfb5797-a9be-432e-aaee-70924c27dd05", "eventTime": "2017-05-26T22:44:15Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAKTT5KTPKZXO1FV5W", "expiration": "May 26, 2017 11:44:15 PM", "sessionToken": "FQoDYXdzECAaDL5i6hqGcrDpMxL+WCLMARU0fes/O608aGQMDDLTxNQK8yos3CvPEUdg00b7v4hHV9M2wqZ5VfHzSv0byDJyqWh3lDmOuJ2pmd3vlitndXxBPSFaSNuWgCnRIkmgf90uJ/6h9+7nO+29BMzWjbUNTcnKKcyxbhMIs8zQ3Z95u4/Bc/wdhAOWtlEO1YjdTUaZL0hAS+Z35YGIKeqZKRx9zwo2CntHK9MKlGek4omh8LZKUQGt/544flEs0SgCa6AEJ1Mxt7spuFFPBjW0C95dvpP0039z2rsEU+UElSi/36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01494f1a-8c01-4d7c-94c7-43f401773b5a", "record_id": "flaws_cloudtrail:0000108:01494f1a-8c01-4d7c-94c7-43f401773b5a", "row_index": 108, "timestamp": "2017-05-26T22:44:16Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAKTT5KTPKZXO1FV5W", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 994, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01494f1a-8c01-4d7c-94c7-43f401773b5a", "eventTime": "2017-05-26T22:44:16Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAKTT5KTPKZXO1FV5W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:15Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c11f9751-2145-406e-8b7c-6649d4a6673f", "record_id": "flaws_cloudtrail:0000109:c11f9751-2145-406e-8b7c-6649d4a6673f", "row_index": 109, "timestamp": "2017-05-26T22:44:16Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1455, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c11f9751-2145-406e-8b7c-6649d4a6673f", "eventTime": "2017-05-26T22:44:16Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA2W3GRZ57NGVIZ12X", "expiration": "May 26, 2017 11:44:16 PM", "sessionToken": "FQoDYXdzECAaDO66B4UTHSJW3Jkt/iLMAVRhq8JNQZL96kuViTMhdUmjbInsg3XNkSYsnwOzLwlmmot5JL8uVCLOj5cozcBViFUrm1yRAferT2RTwS8pFU5Q4BefdfYm5wFZj6YiPuVUUCaSlZu/4g4c5EgGJZfBWTZZqS6El2+8CAr16x9g2TY2BTEVcTnawjL/Dpje2zYbqNm5VU6CXmltx+MoKqBL6Oe3mDRPTnouNgZ6XIhZ/gU9KG8yWEhXlV8gb+NvXxPpi1IgjyM12BhzJ3DvU1UBvqKr3xcUld8M72YVUyjA36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b37ce536-41ea-44a8-988f-fdfcf383e1ea", "record_id": "flaws_cloudtrail:0000110:b37ce536-41ea-44a8-988f-fdfcf383e1ea", "row_index": 110, "timestamp": "2017-05-26T22:44:17Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA2W3GRZ57NGVIZ12X", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 992, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b37ce536-41ea-44a8-988f-fdfcf383e1ea", "eventTime": "2017-05-26T22:44:17Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA2W3GRZ57NGVIZ12X", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:16Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d364002cd-20cf-415d-abaf-3b56dbaff60a", "record_id": "flaws_cloudtrail:0000111:d364002cd-20cf-415d-abaf-3b56dbaff60a", "row_index": 111, "timestamp": "2017-05-26T22:44:17Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1456, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d364002cd-20cf-415d-abaf-3b56dbaff60a", "eventTime": "2017-05-26T22:44:17Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA8NLY72TBFKPZ1O3V", "expiration": "May 26, 2017 11:44:17 PM", "sessionToken": "FQoDYXdzECAaDG6PHTszCJDnVKWvriLMAcU4Ft5GKNffBkRK+Eo9Y7sVOnH0NEs7e0/Oc/OndJHK9luROeLuKxF0HXwBcghQwhYND7kDozdhAagQ5Lub/LM8O+fYMvypDzi6wg1OLzi9y3NXbvhucwVupxj6cCsSxXPpFPObNusGqvHr+tyCAu9m5zz6zVzH6Swxx7fk+siJvO2r6DzxGaLTCqcAm/ZGyIcHkNuiUN7jPDj1jzZQpTfdUfX2nNyz6PA3Yz+AAaR4ElCxKXRHfIroT41M6BB+6YhDdZAZliwQJpo8nijB36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80e63b54-033d-4b89-9199-7319c892e162", "record_id": "flaws_cloudtrail:0000112:80e63b54-033d-4b89-9199-7319c892e162", "row_index": 112, "timestamp": "2017-05-26T22:44:18Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA8NLY72TBFKPZ1O3V", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 992, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80e63b54-033d-4b89-9199-7319c892e162", "eventTime": "2017-05-26T22:44:18Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA8NLY72TBFKPZ1O3V", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:17Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0a0ff38-4373-4ad4-9644-0adb24284af2", "record_id": "flaws_cloudtrail:0000113:b0a0ff38-4373-4ad4-9644-0adb24284af2", "row_index": 113, "timestamp": "2017-05-26T22:44:19Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAUJY65P8HY2XA21I1", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 989, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0a0ff38-4373-4ad4-9644-0adb24284af2", "eventTime": "2017-05-26T22:44:19Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAUJY65P8HY2XA21I1", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f72e222-f58f-402d-b5f6-222697a93884", "record_id": "flaws_cloudtrail:0000114:4f72e222-f58f-402d-b5f6-222697a93884", "row_index": 114, "timestamp": "2017-05-26T22:44:19Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f72e222-f58f-402d-b5f6-222697a93884", "eventTime": "2017-05-26T22:44:19Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAUJY65P8HY2XA21I1", "expiration": "May 26, 2017 11:44:19 PM", "sessionToken": "FQoDYXdzECAaDM8AuveL6y8kxsM34iLMAcj0ibflwh76DvaKsyVJv5fSp4tZfrsb885Yo7RLFIFZio6BPtAtqifqgR3EViwZwuzJtgWh/ttuLIMfcETnqVPkkiiPnWYbNid2zbhyhikKc/K1RzKpfeoJyaoJk/bql46B7PcEs3qCXFfaggMIAXSH+Y05+2LM9KUR3xNS8hHOoRTKubtbdNa802fIrNqFGw6UAfioYVzIxtjVLuA4adeTNOx34mX1aXOnNvWwnPnG/PFTpJgxyp4XgCFfNfPH2Tsy+J+CvvAUCsbOmyjD36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5d4b8ce-bd96-446e-ae87-5e681ce162b7", "record_id": "flaws_cloudtrail:0000115:a5d4b8ce-bd96-446e-ae87-5e681ce162b7", "row_index": 115, "timestamp": "2017-05-26T22:44:19Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIA9ZJX9RD4XNBCQNH0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "116.64.169.60", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 572, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5d4b8ce-bd96-446e-ae87-5e681ce162b7", "eventTime": "2017-05-26T22:44:19Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "116.64.169.60", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIA9ZJX9RD4XNBCQNH0", "userName": "SecurityMokey"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24831e8-fe8b-465b-804b-4112ada35560", "record_id": "flaws_cloudtrail:0000116:24831e8-fe8b-465b-804b-4112ada35560", "row_index": 116, "timestamp": "2017-05-26T22:44:20Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA9X45AJD1A3LF8NRM", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 988, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24831e8-fe8b-465b-804b-4112ada35560", "eventTime": "2017-05-26T22:44:20Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA9X45AJD1A3LF8NRM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:20Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26378a8-704b-45bc-8b49-f3a311d86f21", "record_id": "flaws_cloudtrail:0000117:26378a8-704b-45bc-8b49-f3a311d86f21", "row_index": 117, "timestamp": "2017-05-26T22:44:20Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26378a8-704b-45bc-8b49-f3a311d86f21", "eventTime": "2017-05-26T22:44:20Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA9X45AJD1A3LF8NRM", "expiration": "May 26, 2017 11:44:20 PM", "sessionToken": "FQoDYXdzECAaDJ9Kwmucx4DgrnqJKCLMAYweGfHdp8QsS/F2464XfIHgFAgkAKN9RlPYHlHR79PQ9IGtEd1lAA6dQDViXtPcCQk+eKMMEenhrHbZRuizoYyaCA7bpIHNvudsN5O4R1DeIgKTeG7gm+4Gytr1xbsGvYpiJRnDomeTURpfWRwqbpsE0kVu0XvEOY+RS+UtqnhJDq/HGV8AwWUCMP8WU6P+Sa29PRLvsxlQvEOCL8KPWS+52vzscAI5z8wteZmxTUyIjRc91uSua8W8nJv6QjGDc5RUzXBKU4pDa+SXeijE36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "893673c0-29ba-42ca-9d42-14efce2238e2", "record_id": "flaws_cloudtrail:0000118:893673c0-29ba-42ca-9d42-14efce2238e2", "row_index": 118, "timestamp": "2017-05-26T22:44:21Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1455, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "893673c0-29ba-42ca-9d42-14efce2238e2", "eventTime": "2017-05-26T22:44:21Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAMTX7Y7BSUHJWE0HG", "expiration": "May 26, 2017 11:44:21 PM", "sessionToken": "FQoDYXdzECAaDGLWNkqEiUAAYniqbSLMAZ2gQAxb+2vj9EI8cffD7HG7bG8hb04n9BDTZ9lBRRXDX80z1eJCcv5jeNU4OlZVVHOgbQpWi1qCTHGrwbgq8Uj7l5uEGDHmEPWXS6A+d50G2B5U24hTJylglgzzC8lhcNspyK1Z7WQXrlPdEO9zv1HXxY37wo5TztOAIc8eq+9Esp9sPXXv0FmByrWxR4qOgTJnXCjKjnl4Ftzq8FWlaZD3ax3yzLqmrB+aWgTPDOPvptlD8ac09RiD+jnCmBnbFIALspmmicUoXyaCBSjF36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47606e9-5eb6-45f0-b344-0d430adc5c05", "record_id": "flaws_cloudtrail:0000119:47606e9-5eb6-45f0-b344-0d430adc5c05", "row_index": 119, "timestamp": "2017-05-26T22:44:22Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAMTX7Y7BSUHJWE0HG", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 987, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47606e9-5eb6-45f0-b344-0d430adc5c05", "eventTime": "2017-05-26T22:44:22Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAMTX7Y7BSUHJWE0HG", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:21Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1f14d0f-8337-4c18-b56a-95690693aef1", "record_id": "flaws_cloudtrail:0000120:e1f14d0f-8337-4c18-b56a-95690693aef1", "row_index": 120, "timestamp": "2017-05-26T22:44:22Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAXQ6F8TILG1IYAWIM", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 989, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1f14d0f-8337-4c18-b56a-95690693aef1", "eventTime": "2017-05-26T22:44:22Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAXQ6F8TILG1IYAWIM", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:22Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5cd283a-55b3-4b3f-b844-414fb76126", "record_id": "flaws_cloudtrail:0000121:f5cd283a-55b3-4b3f-b844-414fb76126", "row_index": 121, "timestamp": "2017-05-26T22:44:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5cd283a-55b3-4b3f-b844-414fb76126", "eventTime": "2017-05-26T22:44:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAXQ6F8TILG1IYAWIM", "expiration": "May 26, 2017 11:44:22 PM", "sessionToken": "FQoDYXdzECAaDDH1MUS8oVPqD+qjqCLMAVsOQgcGDfoqHdEAbdC+jFBhPajjc80hovx14EfdLxVOat/wf0wkqwyu0mmQM4e1ZiVHKqcz9kygJkqifSPCs1PpywN1ElQ86tQuOwhGz+SqeAkYBxZFgzTeygzRrWav3dBYa28/65JjtJjK3Ff8aMcMAkerKmmhLl9IcpV2jLFOdhwO3oVTFuLM6rwBKauPOpwVObqqTGj+NXNuBcE/Kg3cTkCK0gv7fSewqjS2HdzYJiQ7Z/W25OTSrmNQfQ+wkkGC2MVu6aUgQ4+JuSjG36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9536c0f-a6cb-41da-8f76-60d63392bad", "record_id": "flaws_cloudtrail:0000122:b9536c0f-a6cb-41da-8f76-60d63392bad", "row_index": 122, "timestamp": "2017-05-26T22:44:23Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9536c0f-a6cb-41da-8f76-60d63392bad", "eventTime": "2017-05-26T22:44:23Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIALE8N1PJQBC34M0O3", "expiration": "May 26, 2017 11:44:23 PM", "sessionToken": "FQoDYXdzECAaDLnCG5W3F89skZScxSLMAQlwfBnHQOMOzAeWx18e8n3T34vEe20NVRbS5HTi7+uYg80nE/zavE6eKoIkpbP9xM8eJ4mUDPAhZqxfg1Q8yRjhNsIm1C1PlIRux3+Lm63b43sKIcekTcGgCnE9N3+kYcFePLwjL43OZm8Ox+kWOoKpkfWqG/jd4X0FbIblhI4cTszeNr7DQh1xU/gEYUCFqLoOeCp2AKSVxVCWHk3DOZmJnD6MOLi+TOazklPc3lVUYkE45G0jWK+sV+czUvTP+b3aWln4v5CAaWs/ayjH36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "928476-fbe3-4d28-9a40-6c2a981dab91", "record_id": "flaws_cloudtrail:0000123:928476-fbe3-4d28-9a40-6c2a981dab91", "row_index": 123, "timestamp": "2017-05-26T22:44:23Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIALE8N1PJQBC34M0O3", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 987, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "928476-fbe3-4d28-9a40-6c2a981dab91", "eventTime": "2017-05-26T22:44:23Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIALE8N1PJQBC34M0O3", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b382f89d-376e-4492-8687-13a907730ab5a", "record_id": "flaws_cloudtrail:0000124:b382f89d-376e-4492-8687-13a907730ab5a", "row_index": 124, "timestamp": "2017-05-26T22:44:24Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1455, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b382f89d-376e-4492-8687-13a907730ab5a", "eventTime": "2017-05-26T22:44:24Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAO21W00GL1J2SQ75V", "expiration": "May 26, 2017 11:44:24 PM", "sessionToken": "FQoDYXdzECAaDISG4hiGUK6GnxE+ySLMAfztpuo+hczlUnM1PTlHgK1et5KpJm9hDgv5QlHPwMt6vn7Z3Dtm0UIkBcSvawqRlicWhWsXDyXYedRzyl77zsmXm7LYbyK97v1fYVf6fOe2IxTRk/79NC0Gab10uPJP9Sglc/CkIQmpl9l2OhEfbkzSSTVkQx469FDyt6ePy5FfvGpJZLruwqaVFEYl4F7VZE34WSIqtKPHQk31KCZogtEUox4fn6fK1E/cKZ/ms8Ipi/oAwMicqPkFxWTViI5/yRVc4t2SUxFwiiNrtSjI36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9cce0d70-bce2-45a8-aab9-150c57ef0396", "record_id": "flaws_cloudtrail:0000125:9cce0d70-bce2-45a8-aab9-150c57ef0396", "row_index": 125, "timestamp": "2017-05-26T22:44:24Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9cce0d70-bce2-45a8-aab9-150c57ef0396", "eventTime": "2017-05-26T22:44:24Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA3M03XHR7PBPFTFOQ", "expiration": "May 26, 2017 11:44:24 PM", "sessionToken": "FQoDYXdzECAaDNbI/lyTz53YzINgTCLMAdzTIf8syDRyA9Xs8dnTJd7LGqfGuCzPz9TR7E6M5QoyYwBgcbb48tnqlnNed3ltlPQBASFzaQLrrQkY5mHgAPMa1rPY1xRDWJBhjYKIewagfylXRtKI/PQYyM9wl0VM/OQo0WZQ3PJALcZUjJGbsow2kUwd5Qz1GV465ixg+JC7FPTkd9jX0ihLBv8uvEFFG3yoEIU1M/yd+Vz0QmO6ewjQdvBl2Zpop1TBA3+jfaDDcZIyI9jkBZqttrWE0FrpXBwpy1fBfztNlxlsySjI36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99e607eb-e137-4b81-87cd-7d63c3c771c3", "record_id": "flaws_cloudtrail:0000126:99e607eb-e137-4b81-87cd-7d63c3c771c3", "row_index": 126, "timestamp": "2017-05-26T22:44:24Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAO21W00GL1J2SQ75V", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 990, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99e607eb-e137-4b81-87cd-7d63c3c771c3", "eventTime": "2017-05-26T22:44:24Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAO21W00GL1J2SQ75V", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:24Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01c8a28b-99af-4272-b01e-8d884057219c", "record_id": "flaws_cloudtrail:0000127:01c8a28b-99af-4272-b01e-8d884057219c", "row_index": 127, "timestamp": "2017-05-26T22:44:25Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01c8a28b-99af-4272-b01e-8d884057219c", "eventTime": "2017-05-26T22:44:25Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIALW9TMOFMRQ4K5EXI", "expiration": "May 26, 2017 11:44:25 PM", "sessionToken": "FQoDYXdzECAaDHSMOBtnlAKvkpnJMSLMAZDZ50hZFEXkEb1z5Jt5G4AAN2ri4PisXgf+5dJWitaJ6bcIS0sxcZvnKFM0CvvHx2iwLoDYgimbiruYqKRIuiiE+PoKyIVgIIITyCmD8CuM8xQ122CvJFwKfXmqYIXB/zgPCuFT8SmQa9iHxM6xv1ib6V6HsUE9VN5AI7gbuvCW6cwqhyP/B4rffpXlqrzzDgMwAscd9rE2GjUvanND0AawnX4Yz3JqfisUYnm38uHOfrVT8XavaMZONGejg6hQvWe2Hyus16U9zIgSbCjJ36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2cbca6ba-3b8b-44b4-b0b3-6a0395eeac9d", "record_id": "flaws_cloudtrail:0000128:2cbca6ba-3b8b-44b4-b0b3-6a0395eeac9d", "row_index": 128, "timestamp": "2017-05-26T22:44:25Z", "event_type": "DescribeConfigurationRecorders", "event_source": "config.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA3M03XHR7PBPFTFOQ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 989, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2cbca6ba-3b8b-44b4-b0b3-6a0395eeac9d", "eventTime": "2017-05-26T22:44:25Z", "eventName": "DescribeConfigurationRecorders", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA3M03XHR7PBPFTFOQ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:24Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9609d10b-131f-4b52-b028-d3e272eac918", "record_id": "flaws_cloudtrail:0000129:9609d10b-131f-4b52-b028-d3e272eac918", "row_index": 129, "timestamp": "2017-05-26T22:44:26Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9609d10b-131f-4b52-b028-d3e272eac918", "eventTime": "2017-05-26T22:44:26Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAQCNGIBJYLLD7DUHC", "expiration": "May 26, 2017 11:44:26 PM", "sessionToken": "FQoDYXdzECAaDOCSMyhl1X3pr6fX0SLMAXgIiFw9+32ORlCBPUXXcp6/qAN35wByrqlSYR8ib2x1mYKKjtzy9We9bKl1TXPKczK9gUfSUhRhdSL6e9fwsJv2k9z81xDtbrmrb4dAghsdl6YRS8GnKrHPNRKNRg/zWmm2pegIm1hP4bqJu8V7hGP8cqy99hBf9FSlIv11SS4pfb0usXigd4YdTu9DirIEa6xE7meyk7gYLglMjcUImVQyMODLuIqjvS90eBG5W+6YN1EPP3UWo9y4e8EhQ86yHzKHx59dRr+dRBE44SjK36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ef8ab57-9fd8-428b-add4-f3895ec77ad4", "record_id": "flaws_cloudtrail:0000130:1ef8ab57-9fd8-428b-add4-f3895ec77ad4", "row_index": 130, "timestamp": "2017-05-26T22:44:26Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1449, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ef8ab57-9fd8-428b-add4-f3895ec77ad4", "eventTime": "2017-05-26T22:44:26Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAS18R08FM02D8SYTP", "expiration": "May 26, 2017 11:44:26 PM", "sessionToken": "FQoDYXdzECAaDItPxOtdU53CkINjyyLMAXE3G40ShZkOS1DFjpGtQ0nN1paYVovJJdf3aOpG1wIqzHQWUdz1iySUOFxbFMx44tEHf1049ARQJmWrUDtZAusNYEoTIJDsYpJTWcnzNAExkSLgpdzJzBYqhy7oJUhCViME7XThHhhw52al9KAbIx7FMr8ZmlBYnWR1GybmwOuplsO43Fb3VfPDS0KRFAlETdc5+e8ATZpWgWc4kNkAKNjaZIMbNm0vL+IzU1W+HBfZM7dC9H5uqf2Yt8IkLL7SIV6BOco8Kwa3KwKjbSjK36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7c56715-8954-4387-bbfc-3c924bb04a19", "record_id": "flaws_cloudtrail:0000131:b7c56715-8954-4387-bbfc-3c924bb04a19", "row_index": 131, "timestamp": "2017-05-26T22:44:27Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1449, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7c56715-8954-4387-bbfc-3c924bb04a19", "eventTime": "2017-05-26T22:44:27Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA4UL1PX5VGB8YRN3A", "expiration": "May 26, 2017 11:44:27 PM", "sessionToken": "FQoDYXdzECAaDIp+mlJTImR2WS4+JSLMATtHovo9l+OtES6MHs1eVwY5vd6vuLZPTxktEWJHaH+oZgHOr4CLBDuEWhAwONeUS487RZ+f1JTpZjSqZgUj93JGiT5HDP8A1+CjzDbL+ZKpMl8QJWtwjL6t1CwqEz7QLa9pu8ThzjVy4xz/jmC2vliIWxlGbBkTqRREbse72+H60bmfmiuzQygPAAdBxKMZPC8Hg3gL5c2bQ9RNgdpN7xZMU4ALp3YQQl+lGil472iKvH9r5ZV/cvWEbw3T07bcpNwhpVaw8ej3Y8FGpSjL36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5508ed49-2a13-4590-861d-3e477ef7873f", "record_id": "flaws_cloudtrail:0000132:5508ed49-2a13-4590-861d-3e477ef7873f", "row_index": 132, "timestamp": "2017-05-26T22:44:29Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5508ed49-2a13-4590-861d-3e477ef7873f", "eventTime": "2017-05-26T22:44:29Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA0HN940PXDDCDCK1E", "expiration": "May 26, 2017 11:44:29 PM", "sessionToken": "FQoDYXdzECAaDJDbZ0MSmRfozGRf2iLMAd4nSzFIWSDwnJH8WFAXBG9ZmEawDEVbAiLTrJ3r5JspIVteqFIU2p7IOydQYU2yHPdTqjRXwvFAMlRBDZop0KP78Eip6cCOakjyOFX0c5y5weqahsF6mxTXVqSILgnSbmt7iVdWHtjznQOQRx/md6o0zx4nlz4ym02CayHsM/DOaBNWZ9P+gUZA9h1LvLTTC+o5ePofLKQuw1FX9U5DIfith+ud1lbVw3bXaRvrp4hsl9hDU0NPdpTKe9v8wFwMw8AKD/wwvTiHwBN87SjN36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "306dd0d2-0747-41d5-8a91-1415f397cd3f", "record_id": "flaws_cloudtrail:0000133:306dd0d2-0747-41d5-8a91-1415f397cd3f", "row_index": 133, "timestamp": "2017-05-26T22:44:30Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "306dd0d2-0747-41d5-8a91-1415f397cd3f", "eventTime": "2017-05-26T22:44:30Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAK53CXVGTKMF1KBDI", "expiration": "May 26, 2017 11:44:30 PM", "sessionToken": "FQoDYXdzECAaDG1Jx33lXgMHExF3ZyLMAZD4+Sd7h9LZrGYVR6GEHZe6JBtjIRBuufSWGJn2TeU/d0IHx6LOxyvHG+dkNx30vmIyp6eKnbiTsJ3odptUTcPo8jqlCkpU9zbjA39ZlBy6eMV5QIP7nJb+odehgKiy168zDT05S+ovcUcCI9FEH4chvFsFgDzMpPLkYYQp/hvCQNMUgqtbzWZevwnFk41QvOQX70xGbl5C8qmSWxXdp99K13qXQPddS02r3s/cZ4sm9v9xQ/m8VkmiTdlWcC5+8qJKsNaoFpkFe8cfqSjO36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1ece7ee-29aa-4ac9-8208-91ce75ae3b4b", "record_id": "flaws_cloudtrail:0000134:b1ece7ee-29aa-4ac9-8208-91ce75ae3b4b", "row_index": 134, "timestamp": "2017-05-26T22:44:31Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1449, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1ece7ee-29aa-4ac9-8208-91ce75ae3b4b", "eventTime": "2017-05-26T22:44:31Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAIUKU2Y5RAXNSF7T7", "expiration": "May 26, 2017 11:44:31 PM", "sessionToken": "FQoDYXdzECAaDFQLHkagEHKlhYIiXCLMAZ6geUtM9wu9rrAE2hEM9qb+GbpV6c/2VH4WLvVbqRY84wy4dtAXs56rmz4CBKXvBOD/SqgvFwHxYF5wzYBGRxr82/HF5s/A7hB/TzOmXka2HvNH9iVyFTlVDtPf5h/i7jx2nIa94lXXt8zCO4C7M+iGIz1ktEAxVLaj/HRAPnxVtHjeD9YbBN3IHXdE25sjng2ayexk/e74CS4t7UqLksMGE59wklHPktsuo2jyVFfXX9C7o76U7Oev7Y13umKt95PICfeiKQ2e5QMOICjP36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "728627-e81c-47c6-b51e-ad165b4eccbc", "record_id": "flaws_cloudtrail:0000135:728627-e81c-47c6-b51e-ad165b4eccbc", "row_index": 135, "timestamp": "2017-05-26T22:44:32Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "728627-e81c-47c6-b51e-ad165b4eccbc", "eventTime": "2017-05-26T22:44:32Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAFOFYQHZMUU1YLT5P", "expiration": "May 26, 2017 11:44:32 PM", "sessionToken": "FQoDYXdzECAaDBx3rt6OCG9I2ltH4CLMAV3jZdo6zZWYWBaLPtAuuZDsj2NeUgiJy98tjnXH1wLwVcKXu+1JxKZlRZynq651n+h9+qNv/UgmdcWebxOZwupJEAwBsVGNETnlAgF8Hl7QL9qvMPuWYTXVOZ//ul3oo8cLX1A7sFVC1maAb07BOlPg7OUYT2i4NkOkmlxMDVJ3a0XJQ0XnhiApkrTZrnezpUg05QUwGH2FnNGNCbXHzsqM3wyiR1mIPzMf5a96dFe9XJtXakJfzP5t6oJgrNlEAcqsiTGwIjWFrwX/9SjQ36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "133e1d3a-8c6a-43f5-888d-665b59a5c7a9", "record_id": "flaws_cloudtrail:0000136:133e1d3a-8c6a-43f5-888d-665b59a5c7a9", "row_index": 136, "timestamp": "2017-05-26T22:44:34Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "133e1d3a-8c6a-43f5-888d-665b59a5c7a9", "eventTime": "2017-05-26T22:44:34Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAA8400MID9F7K7841", "expiration": "May 26, 2017 11:44:34 PM", "sessionToken": "FQoDYXdzECAaDNNkA95GKGSmpvw6JCLMAYqRKuhhUH1RypG+7ZoVm91ug5W20Rjiglg4iGBSM2rwfTjC3VR+1k/k4YeibP2Q8+52ihdUp5Nl8a7zcGhpFyJB8P4KL0BhfAh90UjmTCW38fDUMEKRyiS7hTE1rUjvG1Oa81V8cQCyU8LmXdUTpG27SEEBpfMRPb8Q3WyaK6hGpUrzDeD14d8BIvyFjBPHiGe+I2mBHk8zK9OgeRzCiT2j5gj9ICbRgzVT73nvCvfILP/S8NnxhiENDpcI/x5ACfIp/qEF+quGPSfRVyjS36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ef31c16-4fc8-4401-8954-3388b05a6805", "record_id": "flaws_cloudtrail:0000137:4ef31c16-4fc8-4401-8954-3388b05a6805", "row_index": 137, "timestamp": "2017-05-26T22:44:35Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ef31c16-4fc8-4401-8954-3388b05a6805", "eventTime": "2017-05-26T22:44:35Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAXFLQ85IRO53WXNRH", "expiration": "May 26, 2017 11:44:35 PM", "sessionToken": "FQoDYXdzECAaDPjdS4JPJLPtMwrHWiLMAbBsSlqqBiRPSYjRpodiYZ20pyg+VMLqR7q6zQ5CTz6BNZ8jfzoxgXCHBupQuHW5fkysWoxOGzRGJIfRa35ZLCymAkXSg6A3TKMYHj4wf1YVtPAgR5z4hEcSsRPZeRccfp4DLFbl0AadtSDTerZLfAe4636VPuQ8m6pS1Ijpw0Wpm+EFH2qWaBaHmDWZa385J6snhzpzj3SgOUmC00Kg/cIMw5uj99GcNxv++bxV+PSrqXNxwuGDZq3ZTInEEmtuIq4zg270IanozGgAdSjT36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0ee70d4-94fa-4f1c-8e88-cbedaaeead5f", "record_id": "flaws_cloudtrail:0000138:d0ee70d4-94fa-4f1c-8e88-cbedaaeead5f", "row_index": 138, "timestamp": "2017-05-26T22:44:37Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0ee70d4-94fa-4f1c-8e88-cbedaaeead5f", "eventTime": "2017-05-26T22:44:37Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIALXF0E671MNAZF66W", "expiration": "May 26, 2017 11:44:37 PM", "sessionToken": "FQoDYXdzECAaDDPiSdjp7wD0wCcS7iLMAZzCl4oCe3oEEP3PVXaQ6rT+aOq6nMK/vWC5Q1TxAljeyLbJ9kcDFXhduv02iaaKXNN4v/hF9aZriQ/H8j7Nu6fR4mL6txYw5KeGP4st6eMBI7tQzb8AHxc5prCQhnBfsHDSa31CiaC0Xl5KxwrMIjf/R0VOMgX+fw5P4arNir8GNZ6uHIsbPGvlsjwo/UXWdgnwA0irGTjPJr87bl5EoPcTRcF7v8cfwiux+Fdp3oHfNEimARz55fNVGczJgZenn50+wXMcbQNBm7/juyjV36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d65773-8186-448b-8c3c-ad16bac20534", "record_id": "flaws_cloudtrail:0000139:d65773-8186-448b-8c3c-ad16bac20534", "row_index": 139, "timestamp": "2017-05-26T22:44:37Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d65773-8186-448b-8c3c-ad16bac20534", "eventTime": "2017-05-26T22:44:37Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAYRN5T98NNA08759X", "expiration": "May 26, 2017 11:44:37 PM", "sessionToken": "FQoDYXdzECAaDKraEUr4QaJlMQkXRSLMAdVnAyPCnEKZHP1FieQrGQ9vTP8rzOVysZO5GG4pn9ztuaZYHdUQOUCMKkUh6J5Bh65jKgQlsMAO/WuXhRqMpW7l/USd1Pq+YCt0MwePiTDvXqr+1jRyNNo8x67SVU/ukwiHBVIWvAkjF8y3eUnWFsqi+u6+GgdJNXC8ygvdjERj253++qaRKuIMZauPNO6s5VXGqZz+WKUjnSlhWOPWtnWVNmUUC7NVL7GRB6Lnv0YLjEQjn376wNn55L/Y4uRM7g+7ZliDrTfkIBlqbyjV36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22121-1ff3-40eb-897f-2402584a622b", "record_id": "flaws_cloudtrail:0000140:22121-1ff3-40eb-897f-2402584a622b", "row_index": 140, "timestamp": "2017-05-26T22:44:38Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1451, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22121-1ff3-40eb-897f-2402584a622b", "eventTime": "2017-05-26T22:44:38Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAY0N7FFKN99K89GFU", "expiration": "May 26, 2017 11:44:38 PM", "sessionToken": "FQoDYXdzECAaDApGmvNunE3LIVyUySLMAZz6YRGgiSKWevSHjn9CmRZtlnzMg/R+sUT5UvTZ3tBxoljC6MDJF29++vLsPnsWSW38v0F0cL09bm6MiYbIUqM7kigB66d3QfLmDLp9hfZLShXEMPWuNzXW9qwp5oFWJ0OKa4alpH10gzbcYIfSoByUn0cQfftK1rk6Hp1+zRAMsbyZucfODXNxZGTAOjQAFkyD+Y1knptWrzLkijWN8flHevAKB79BpqBVUdQJzmdTVS+HDOMoeXbJcWYljJ2ZQEu+g4WKH6P+OaMRgyjW36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1a978f5-1731-4b06-95a1-07b405a19b59", "record_id": "flaws_cloudtrail:0000141:a1a978f5-1731-4b06-95a1-07b405a19b59", "row_index": 141, "timestamp": "2017-05-26T22:44:40Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1a978f5-1731-4b06-95a1-07b405a19b59", "eventTime": "2017-05-26T22:44:40Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAW1PUGK0JT7LDKVDY", "expiration": "May 26, 2017 11:44:40 PM", "sessionToken": "FQoDYXdzECAaDHmVLW2WbP9LcaO06CLMAfMmr9o1L56sKaRwTUP10jmsrH9YlgbATcOAIqjXvrsiGqYIENji8eDtgatjU8PHva7pJsg9WeaLPvV6wIK1b2N6w/ctqRi70L5XSOizXIhRNM8cVewfq8zI74KdUwpfv0+Z/0XzTBu4QuV93tGMFzMaB3HwnuaLtznIOGIVDlJxaxlpzOzz4UNoahM0FI4M35TNkBxElxjR/jHP1pJFmajcINkqPBbUhIVsx6/CRMzY+GlS7pn57yZUTBaQO9qT7oUNJ1+jMIBjiWXzvyjY36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c87d37be-97d5-46a4-80a9-785ff4209d8e", "record_id": "flaws_cloudtrail:0000142:c87d37be-97d5-46a4-80a9-785ff4209d8e", "row_index": 142, "timestamp": "2017-05-26T22:44:43Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c87d37be-97d5-46a4-80a9-785ff4209d8e", "eventTime": "2017-05-26T22:44:43Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA8Z0B2QOWXZXHAWGG", "expiration": "May 26, 2017 11:44:43 PM", "sessionToken": "FQoDYXdzECAaDBPVVgSiMOMKS6to/yLMAf+33bD1sDJB2nxgWx6Ar2ffm8mXCRoPRdq3w1dXGwJPZjT9zzKkDVhmAzITIGTxZO6265E30OHTvEnnbKgzvWSD7xIw3aqjlWhwqkR7DDp096cL9jwnkYmJ0uzCi5MrD30tUfTWHrIUhUJkuw3x+C31p1cAsoN6HAPwRIzFHue2tfzguXLlqhundnfM0zThYvUhF6Vr/OJvqbeXlzUJzpLR71Iw69s27YfSV/U+aPpx1oaRi2gkEhE0Rxzrq06SlWSpLjpoelUB5r0z4yjb36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97521ee-3ebe-419d-b30b-44975208372c", "record_id": "flaws_cloudtrail:0000143:97521ee-3ebe-419d-b30b-44975208372c", "row_index": 143, "timestamp": "2017-05-26T22:44:44Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97521ee-3ebe-419d-b30b-44975208372c", "eventTime": "2017-05-26T22:44:44Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA4L3V17UV9R2JAB9V", "expiration": "May 26, 2017 11:44:44 PM", "sessionToken": "FQoDYXdzECAaDN4orywx8gZJgyxLCSLMAVcawcytS5v8ZdMX7T6oOiJZFJRWnBN0yMSzhY+zpGNlMbwxTqLGtAabn6648zqoqgdddvwHjIiRcsXoLcsUD7Mu+RAnUeJnks/ncTJrG3EpYjL+Yh+JbferEFYAlort0jhMpPkukFLM2A/Ov9qbOwVrhZhvRSwqmYAbo90Wg7WJcXtpuduAx/5ZLqN0iNOqowtAfSkRbQAh+zui0yAYozttqkDLrQ63pIiB1wHwdKYYXEWacrS2CYZFqD2GJ7LpBygGgWFdyNIkJR1Jmyjc36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fbe7034-4c99-4a35-8fc8-c8710e6d7a43", "record_id": "flaws_cloudtrail:0000144:1fbe7034-4c99-4a35-8fc8-c8710e6d7a43", "row_index": 144, "timestamp": "2017-05-26T22:44:45Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fbe7034-4c99-4a35-8fc8-c8710e6d7a43", "eventTime": "2017-05-26T22:44:45Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAZ0G8JXM8ZR8Q76H7", "expiration": "May 26, 2017 11:44:45 PM", "sessionToken": "FQoDYXdzECAaDOUj167c3V9o21LeNiLMAUmXdHZ4dfh+0XSGAwq0sUT+jJQykVC66ZhGy1KaOPc1BOt3gWzLEg3IFyICXRM0+0vQWwaXcmJozJf7qD77XKF24VjqJxCf+uO/NcMLZ83zOWREbswaBXvmnbfnpKK+B+krVqQ74EWaEj7VThy7yc7LTyckLesXPYJQq+mo3qpKpPMEnDp5BNVn8swGII4pl5/L9/A0Uc+zRR4CGPW6MhV1mwM9DWwHIPK7I2uFo8Z89m8ls5Nrg9yoH7xhdEaJUiUxVCQvTUKcEhta3yjd36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0f0b7de-d978-4d56-a9cf-7d92bd1d9870", "record_id": "flaws_cloudtrail:0000145:c0f0b7de-d978-4d56-a9cf-7d92bd1d9870", "row_index": 145, "timestamp": "2017-05-26T22:44:45Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0f0b7de-d978-4d56-a9cf-7d92bd1d9870", "eventTime": "2017-05-26T22:44:45Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA1HAN2BYOYVFAY8LV", "expiration": "May 26, 2017 11:44:45 PM", "sessionToken": "FQoDYXdzECAaDFjZxyr/xgLPMtp6biLMAeJf9aNEDmEoWuLy+HbMZXrmVoy4XUi3w5F0HS1xv01AALOX5yZHaKf+1fx3tdJXnrJeSEQRqsspYUtL1ns0icZAwqeHxgBrA0O0oR4MI6FiGreZcEqslQgB5aaeDfXzY0OlBJviC7fEQo0Fy8zYZvzwLY1sl79hdiFCYNmkf1PJFumeCdf5GIIv/fo2eeLBVRq7L++k0F32meJHlXl1p1QDnaw365MRlbZrn8zc5axdRyHqUo+iG5P642Nd4Y2ZffkX55GIqhSMMvRZqCjd36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "705c115c-172a-4502-8966-8bc6c302c676", "record_id": "flaws_cloudtrail:0000146:705c115c-172a-4502-8966-8bc6c302c676", "row_index": 146, "timestamp": "2017-05-26T22:44:46Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA1HAN2BYOYVFAY8LV", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "705c115c-172a-4502-8966-8bc6c302c676", "eventTime": "2017-05-26T22:44:46Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA1HAN2BYOYVFAY8LV", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:45Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7241d9d1-6dce-4c53-b784-8210a502ee8c", "record_id": "flaws_cloudtrail:0000147:7241d9d1-6dce-4c53-b784-8210a502ee8c", "row_index": 147, "timestamp": "2017-05-26T22:44:47Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7241d9d1-6dce-4c53-b784-8210a502ee8c", "eventTime": "2017-05-26T22:44:47Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAK9BI267YE1OQ4971", "expiration": "May 26, 2017 11:44:47 PM", "sessionToken": "FQoDYXdzECAaDAIouzc7oXmsUSAvnCLMAbfyPzILscjLKKWSHMBdKa5I+f7ErViRvuLsxINndY9DABA+SQvMqyw8trtz9OVGJqiW1zPIVBRN0WspFmJis0XDE/RDplQw9B0Brf7asjDsilZuU6NjzUnWC65QJcj2RaQIq3EE4iJnrVQLpZ2ntXzXqOicrHth4vnTKhuyp8qVbhIi9GrEAvuqay2M3yHKFKVkHybx0RkO5SCCh2khURUWGtRBKJRc+tXjX/Xi7OxsOZKxyWxzPlJiMv1/bQLlOPh4ZsRZCItc4JUWHyjf36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14b07707-f856-4bb4-971e-ae94d5ff19ac", "record_id": "flaws_cloudtrail:0000148:14b07707-f856-4bb4-971e-ae94d5ff19ac", "row_index": 148, "timestamp": "2017-05-26T22:44:48Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAK9BI267YE1OQ4971", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14b07707-f856-4bb4-971e-ae94d5ff19ac", "eventTime": "2017-05-26T22:44:48Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAK9BI267YE1OQ4971", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:47Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "319f7e95-9259-4e22-80f3-974d75457a23", "record_id": "flaws_cloudtrail:0000149:319f7e95-9259-4e22-80f3-974d75457a23", "row_index": 149, "timestamp": "2017-05-26T22:44:48Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1455, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "319f7e95-9259-4e22-80f3-974d75457a23", "eventTime": "2017-05-26T22:44:48Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAI81JMTIF9TIIXAH7", "expiration": "May 26, 2017 11:44:48 PM", "sessionToken": "FQoDYXdzECAaDFPsrpuNytfmVupqeyLMAXyBT8oXUhc5RsNnVlRmrFFaw9VSSGo/nWwke/ox/MBQ3CGpuw4r6N1BULdBCPerxGx8pDDOYVnS/ZqYfJ3i/vXao9mTBJxR+XCIjjY5YEfnADlrVYBK6egESabtPln4X1IqrMP41kNO72LzhApUm3fvdbFRb/tkK8NMk0bHczx6Wtx0A6HnkCYEZmhcz1cehnGUEdvkqWgpI3H0TGe+CbAUag49jKpr3YoyRJhD1sacchesX4FC/yG4intu0X9rRr0vu/AeSytrZLAAlCjg36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f37e668e-7fa6-4281-a294-9fa266caf1c1", "record_id": "flaws_cloudtrail:0000150:f37e668e-7fa6-4281-a294-9fa266caf1c1", "row_index": 150, "timestamp": "2017-05-26T22:44:49Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI81JMTIF9TIIXAH7", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 970, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f37e668e-7fa6-4281-a294-9fa266caf1c1", "eventTime": "2017-05-26T22:44:49Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI81JMTIF9TIIXAH7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:48Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd6eab94-5b66-438c-a996-6354c0dd71be", "record_id": "flaws_cloudtrail:0000151:fd6eab94-5b66-438c-a996-6354c0dd71be", "row_index": 151, "timestamp": "2017-05-26T22:44:50Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd6eab94-5b66-438c-a996-6354c0dd71be", "eventTime": "2017-05-26T22:44:50Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAVV8724G7BP1WKZBC", "expiration": "May 26, 2017 11:44:50 PM", "sessionToken": "FQoDYXdzECAaDNSRxpVNaVvJCfujlSLMAW2YbA+bl3UBUwP2PeNBMCHdYF2KHzoH5XowMw2Jrkrq2iOpJr5PZw/QqhaXV/5NEIh/gQFXRewe/pIqObzWc91rRCyehdLM3HMISJLPc5Td78wAtkZbaZ6ms0G61YQcHRS6yBST59AVsepspCbu98fJzWGGJv6x5gbYpBr/omi+0o8++qxHqzc+4EsbOz/kNOCgUORCxx44XVrL626ca1xQDQ8R68t7KtGO+H1N8k4hp58ECBGVIHXm44WnuY0W8TzNecsU8bvBpoW8eCji36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b2658c1-1139-44ae-8ea6-bb1944a7b23f", "record_id": "flaws_cloudtrail:0000152:1b2658c1-1139-44ae-8ea6-bb1944a7b23f", "row_index": 152, "timestamp": "2017-05-26T22:44:51Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAVV8724G7BP1WKZBC", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b2658c1-1139-44ae-8ea6-bb1944a7b23f", "eventTime": "2017-05-26T22:44:51Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAVV8724G7BP1WKZBC", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:50Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3997ca22-45f7-4ef5-a4bb-dc1ed9759183", "record_id": "flaws_cloudtrail:0000153:3997ca22-45f7-4ef5-a4bb-dc1ed9759183", "row_index": 153, "timestamp": "2017-05-26T22:44:52Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3997ca22-45f7-4ef5-a4bb-dc1ed9759183", "eventTime": "2017-05-26T22:44:52Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAKCHH6CVVT019N0VK", "expiration": "May 26, 2017 11:44:52 PM", "sessionToken": "FQoDYXdzECAaDK75BJ/Y/9zSel+EuSLMAeSPzA1VaL6x2Kv53ovY3dowejuasFBMeau7JyGf5BwrK/wBZcGK2ve8Cyx3jdXVHgdbPhF0IERqQgvomhXSU6qS8V8jbmlOpRQn71AFXTVOeGql8bccQMcbXnBZVDBVPR1GfpGXtcI6EzHGPeIcAyB4YmXL4mC6kdKXNb6CZCQTcbKq+v+FAcci6b1TKu1yYiwR6P1ueDLX1Ym0ENJpaQyh12RLoO4FdON8HaDOX/jZ0yeCfaQn8wKra/0K1vxiWMtWIv3TfWSXz/oFqSjk36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2f2eca7-54fe-4d45-827e-f13e6ca623dd", "record_id": "flaws_cloudtrail:0000154:a2f2eca7-54fe-4d45-827e-f13e6ca623dd", "row_index": 154, "timestamp": "2017-05-26T22:44:53Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAKCHH6CVVT019N0VK", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2f2eca7-54fe-4d45-827e-f13e6ca623dd", "eventTime": "2017-05-26T22:44:53Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAKCHH6CVVT019N0VK", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:52Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1978b214-6e42-4f53-b47f-6a38f2e90e38", "record_id": "flaws_cloudtrail:0000155:1978b214-6e42-4f53-b47f-6a38f2e90e38", "row_index": 155, "timestamp": "2017-05-26T22:44:53Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1978b214-6e42-4f53-b47f-6a38f2e90e38", "eventTime": "2017-05-26T22:44:53Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIADJUV57WWSRGAV2VD", "expiration": "May 26, 2017 11:44:53 PM", "sessionToken": "FQoDYXdzECAaDEIZWo2+Oq8tusNIHCLMAZRS7JVepYaCakUKLyGf++DTPABFHtRB90NOmax5T/iGyk+8vbbAzRvFaBr5K9pHVmnXJDi99WVxu9ye7jp/VpgRK6dWQ+YSy1afx3kv+GRhSM6IZDEDoSO2hscHVEbC6goJ0J4MuHVV2TagE2feEyhz9ECP0sYThJ12kkxNUu7uT0c8l7fOfNaeC9/DL3IfB+xc28yWjxE9vdvMWAuBpGb5pKTWgCP7GM8QJ9VGo4PMxXfXsHXmqomflCuYFXcMWhzdKcrcGiUrs8Nh/yjl36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "acd4f833-fd5a-41b5-8a51-12b14db3c0bc", "record_id": "flaws_cloudtrail:0000156:acd4f833-fd5a-41b5-8a51-12b14db3c0bc", "row_index": 156, "timestamp": "2017-05-26T22:44:54Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIADJUV57WWSRGAV2VD", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 973, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "acd4f833-fd5a-41b5-8a51-12b14db3c0bc", "eventTime": "2017-05-26T22:44:54Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIADJUV57WWSRGAV2VD", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15cbc8ef-017b-4e2f-b138-2523dea2b579", "record_id": "flaws_cloudtrail:0000157:15cbc8ef-017b-4e2f-b138-2523dea2b579", "row_index": 157, "timestamp": "2017-05-26T22:44:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1449, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15cbc8ef-017b-4e2f-b138-2523dea2b579", "eventTime": "2017-05-26T22:44:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA6ZRMIPBDME1DUGHE", "expiration": "May 26, 2017 11:44:54 PM", "sessionToken": "FQoDYXdzECAaDPSqMu0EbHZmvvMi+SLMAQXdif0Q7VHoNjW2MeLw7gA93e8VQr6tlfvFasoEwQ+eCfxJ5SrGQiYqS/MmekxCAreQI6aFaoY1ttnbi10fx/usROPeCIqlzsWh5g38cgjx3pUmRmFenU7Zl7h0j0ktVn6euLtObRPBDxx0Avc+HLn2zJRLwI7CXoIMNQZyFRisphRpYIJsTt9IKthIfbVwk4Eocj+R4MSXuKZwz/gyArfAsY5/Wyg3LGDrIkbrzM7uizJiKW/lZeEtjzLlseABN8CV0eJCLH0VmugNLyjm36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19bbc997-3288-4b5f-99b9-fe7cdd4b10f3", "record_id": "flaws_cloudtrail:0000158:19bbc997-3288-4b5f-99b9-fe7cdd4b10f3", "row_index": 158, "timestamp": "2017-05-26T22:44:55Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA6ZRMIPBDME1DUGHE", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 970, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19bbc997-3288-4b5f-99b9-fe7cdd4b10f3", "eventTime": "2017-05-26T22:44:55Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA6ZRMIPBDME1DUGHE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:54Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15dc4bd0-db30-496d-a51a-0027f84b7326", "record_id": "flaws_cloudtrail:0000159:15dc4bd0-db30-496d-a51a-0027f84b7326", "row_index": 159, "timestamp": "2017-05-26T22:44:55Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1455, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15dc4bd0-db30-496d-a51a-0027f84b7326", "eventTime": "2017-05-26T22:44:55Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAZAG9UEONFJHL1RJE", "expiration": "May 26, 2017 11:44:55 PM", "sessionToken": "FQoDYXdzECAaDLlg1K5LaOTZgu8mWyLMAf+aONVEkzphMnhm08HZnc7W2rUS5oVVqGqVDJKwBoDe+/eCq54IB41tkvPgJAHtOCvbartrPp+iQ0FGcOZUNUNWnlM5q6hX/h64NAWaTXWVpErqE+fijg3tN6YBYueJbpdGPpEepyA/exTfmoeCDRHP8MZicF7V2fJxg6P42Bn1BkX7motIn7M85Tta2eAie4Kgi6MlXipFzE33tzTLN0HI/3N2bVWV6UEjM8SWy1kocUyxAOZXMQnWAjHdhSmfJ9YVaMupuSavGjGbDijn36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee48b7fd-4dfd-4e93-be2e-bd10f219c2f4", "record_id": "flaws_cloudtrail:0000160:ee48b7fd-4dfd-4e93-be2e-bd10f219c2f4", "row_index": 160, "timestamp": "2017-05-26T22:44:56Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAZAG9UEONFJHL1RJE", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 970, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee48b7fd-4dfd-4e93-be2e-bd10f219c2f4", "eventTime": "2017-05-26T22:44:56Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAZAG9UEONFJHL1RJE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:55Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ecddecc6-1ec1-469a-8c6c-ec9677a7c6ec", "record_id": "flaws_cloudtrail:0000161:ecddecc6-1ec1-469a-8c6c-ec9677a7c6ec", "row_index": 161, "timestamp": "2017-05-26T22:44:56Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ecddecc6-1ec1-469a-8c6c-ec9677a7c6ec", "eventTime": "2017-05-26T22:44:56Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA7D7ZSE765NHSHBFV", "expiration": "May 26, 2017 11:44:56 PM", "sessionToken": "FQoDYXdzECAaDJ+NKLnyIKCBByg97CLMAdoLgB9mJdOe5/WBncgADuvKH/iXXQrCv8ZWEPe5/TwniZ4OeLOl4Xko9dIr7IFT+kMdf+l+nHm+90kG0eLgCh7/g8zDcGOb5e8FsHF64K97zB790x7iOwS4j+ZOGTCZQE2Y4L+AO49J0yJxxuXgEVrNbjWW+Ji8lS4ErmqNEl0QKdjkNPjwgtFWw0u9o1r/+X/Upw8vdMcua+jwk+rLTkFID11nnirbynVRuxhdAELsXRgHOkTHLHbd9f0Pc74DqhoLuR1YsXIyBeSV9Cjo36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19eab777-c826-4f33-b60c-388df4394df9", "record_id": "flaws_cloudtrail:0000162:19eab777-c826-4f33-b60c-388df4394df9", "row_index": 162, "timestamp": "2017-05-26T22:44:57Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA7D7ZSE765NHSHBFV", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 970, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19eab777-c826-4f33-b60c-388df4394df9", "eventTime": "2017-05-26T22:44:57Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA7D7ZSE765NHSHBFV", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:56Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18474f2c-7fe7-4363-bb8e-89fd8bc7c621", "record_id": "flaws_cloudtrail:0000163:18474f2c-7fe7-4363-bb8e-89fd8bc7c621", "row_index": 163, "timestamp": "2017-05-26T22:44:57Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18474f2c-7fe7-4363-bb8e-89fd8bc7c621", "eventTime": "2017-05-26T22:44:57Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA6QWI4Y2Z88C0S1FV", "expiration": "May 26, 2017 11:44:57 PM", "sessionToken": "FQoDYXdzECAaDErKSbfwdZ8xbtTDfiLMARLtbw1V/wr96l+UCHXHoymwvPbZUTsW04W6m2tZnSxBJTf8owcef0pQ3MyHAWntbb9hrd5YQvvHSeIfIZ1jltFsmROfES4JHYte6S+kqWkceOvyIuw+CYzV9xZDMmITFnzPS8G/ZWf5ey/E9uBnkyVo2uWJ9QZdiNyzBvTae8Qd0iSmmp3aEZo/sbmKCIA7EauKCwx2hsdNm/Q1NUENeDQgnDmIN7XaKZcUyKutuvdweGQ4j5ZfpGruNAzv7XMa7AUqH7QegONM9Z22pSjp36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7037f960-e548-4e53-9e65-e8723f39280b", "record_id": "flaws_cloudtrail:0000164:7037f960-e548-4e53-9e65-e8723f39280b", "row_index": 164, "timestamp": "2017-05-26T22:44:58Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA6QWI4Y2Z88C0S1FV", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 970, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7037f960-e548-4e53-9e65-e8723f39280b", "eventTime": "2017-05-26T22:44:58Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA6QWI4Y2Z88C0S1FV", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e1c5283-3de4-4cd7-a5d8-5f2aae83440", "record_id": "flaws_cloudtrail:0000165:3e1c5283-3de4-4cd7-a5d8-5f2aae83440", "row_index": 165, "timestamp": "2017-05-26T22:44:59Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1448, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e1c5283-3de4-4cd7-a5d8-5f2aae83440", "eventTime": "2017-05-26T22:44:59Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA2H3HTSMYGQ75H994", "expiration": "May 26, 2017 11:44:59 PM", "sessionToken": "FQoDYXdzECAaDMTI42vfsg9QSHMPUyLMAU3sjUtaisaCjmdUnPTQPbcM4tdUsXBCso2IHDapyY8TPBsEl6+e/vPqjuGux6jxt4Z+bhmDXtGcjIbciS625ByHohvApxHQGCQhuGUfimtxbG21TKE7Q2Bh1/iAqGpkHaonlEkiaA7s0sxTpqzv1iKe5LVWvO8qBTDeJJ5fBHqb7WXKWb2eA8z/f/SA6GkV4m0p+BotcqOoKZoDs0J11ovW8qHYRQrZrkT4X60nQ98SWa51EN8fonwrNKq9uEXZiivKtXUDkJNDceZdaSjr36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a02328-6cb9-4521-a4d2-cb5b9b106d7a", "record_id": "flaws_cloudtrail:0000166:9a02328-6cb9-4521-a4d2-cb5b9b106d7a", "row_index": 166, "timestamp": "2017-05-26T22:44:59Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA2H3HTSMYGQ75H994", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 964, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a02328-6cb9-4521-a4d2-cb5b9b106d7a", "eventTime": "2017-05-26T22:44:59Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA2H3HTSMYGQ75H994", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:59Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e7ed3aa-1a7c-4330-a56a-bc439c7b0a64", "record_id": "flaws_cloudtrail:0000167:3e7ed3aa-1a7c-4330-a56a-bc439c7b0a64", "row_index": 167, "timestamp": "2017-05-26T22:44:59Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e7ed3aa-1a7c-4330-a56a-bc439c7b0a64", "eventTime": "2017-05-26T22:44:59Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA46EMLHDY3P864V4V", "expiration": "May 26, 2017 11:44:59 PM", "sessionToken": "FQoDYXdzECAaDO9YbmcjPghyW/esiiLMARJCCy1ZHFyxajT/m0S2qm0wuyD6awz0IKwezcid9+HhmpN60hj1/UkCS5+zjs9APrOfI5TXPkGm/Gu4Q+kmSJrvdeTgBUcXxU9zbdlMBUJw4jVuYZvasXTAWkrhQfeUE6LQkvibdJoV5JM2Qe94un/a6wTDSb1XqNB8c/Ahxjw/NfKx4C/K0Gb8JE14catvnSIKngh7EzcE7O4699pgecczgnqApg/wdnt2uwjHtq+KZRmPMPj5E0SfK0WvTFaH6xtcgxm5GOZYNOhaByjr36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d3d90ca-17f1-4496-b9b9-eb111345af8dc", "record_id": "flaws_cloudtrail:0000168:1d3d90ca-17f1-4496-b9b9-eb111345af8dc", "row_index": 168, "timestamp": "2017-05-26T22:45:00Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1455, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d3d90ca-17f1-4496-b9b9-eb111345af8dc", "eventTime": "2017-05-26T22:45:00Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA847HJ9X4YSLXKPCB", "expiration": "May 26, 2017 11:45:00 PM", "sessionToken": "FQoDYXdzECAaDPdbDttUyzDQcrIDDSLMASf227Ex0cxPkJ2B8r9hQQI4DAtCyFZX6usbh7inLwN6z33CYrfoQbfGKNY04dIaWPMDhQpgfFnTMNbWtFXcP8jbYYWrSwCU/Xm9p1cK5BWeHx1nI4XVRNvehcH1zYf7jjNCzYnUGCxv+Dy1tFT75rV05S8ktauRdnKYicblyeTm/3NBUdikMqpciy/J6d5gI+Tt+s/NDxzu4jlZHRg/dze20RTgDVUDzunHtDINdFt1c6L0t8VggV2OlnOw6q2nKGyjNmo39Utyk3Qo2ijs36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c442a66a-8f0f-4c6a-b68a-2d749f074f41", "record_id": "flaws_cloudtrail:0000169:c442a66a-8f0f-4c6a-b68a-2d749f074f41", "row_index": 169, "timestamp": "2017-05-26T22:45:00Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA46EMLHDY3P864V4V", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 970, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c442a66a-8f0f-4c6a-b68a-2d749f074f41", "eventTime": "2017-05-26T22:45:00Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA46EMLHDY3P864V4V", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:59Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48e470164-a1c0-41b2-a20a-801e0c979f51", "record_id": "flaws_cloudtrail:0000170:48e470164-a1c0-41b2-a20a-801e0c979f51", "row_index": 170, "timestamp": "2017-05-26T22:45:01Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1456, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48e470164-a1c0-41b2-a20a-801e0c979f51", "eventTime": "2017-05-26T22:45:01Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAEJK50GCJVY8P9L73", "expiration": "May 26, 2017 11:45:01 PM", "sessionToken": "FQoDYXdzECAaDHp5EY/iyjvDMHjPDCLMAZS+P48btQwJHb1f618sYxHevijzEmP6ArrOQ6jZy4lkrVxS5/mHaCQpgkuGTcHtBCwcchHynNH2KLEvV4lnChe3MUMnS61+mFlXB+FTtkvbR3WdI3NNmaK4XU2tCAGcdTcbdUjMPThij2ViyWA1M71znuDwzMtoLzIJyIkKZLtbm+IwqZYN37BGso4tP7bzgJQf1Xg+OxH4bB6IsBcwXPu+D942Pi1fESa+jbMCbmmMvQOaJuwHYXW3RfAa63yElJC+y7YS7GI1p+QeSSjt36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf67b45e-0d0d-464f-8c62-3251e79767e", "record_id": "flaws_cloudtrail:0000171:cf67b45e-0d0d-464f-8c62-3251e79767e", "row_index": 171, "timestamp": "2017-05-26T22:45:01Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA847HJ9X4YSLXKPCB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 969, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf67b45e-0d0d-464f-8c62-3251e79767e", "eventTime": "2017-05-26T22:45:01Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA847HJ9X4YSLXKPCB", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:00Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fee5985d-0cd6-47d0-bb2b-b56a820e61a1", "record_id": "flaws_cloudtrail:0000172:fee5985d-0cd6-47d0-bb2b-b56a820e61a1", "row_index": 172, "timestamp": "2017-05-26T22:45:02Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fee5985d-0cd6-47d0-bb2b-b56a820e61a1", "eventTime": "2017-05-26T22:45:02Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA1S6AYXJ4X06C7EOE", "expiration": "May 26, 2017 11:45:02 PM", "sessionToken": "FQoDYXdzECAaDL+NMNKZ78rFHpEyiyLMAUaFRPCM5r5JDG09qT+OTfrZifudto6Vuz7Eok6dgifl1dEm3JyRzOYH7+GaemnCzh6KpL053P3auduCXjnmpMpOC2TJVGmiZ9ljQC0BB34F1c/4E3pqTUd63REHpjdloK+Uvtw0+55othYUyBL33+bZi6B3gi4uP1HUH4865+UmqhCc6HWVeq2XSZKRXUjOBBpsjseeSXSnBxVAAc3SBIQ/tyRvhUH5uozAp3Wxr3UL7ZQS8lnrHSaOa2mmo8Ub0ebBXX2Ut3jBzTz1TSju36LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9e0d3b4-f127-4b4a-acd7-445dfaf9de1a", "record_id": "flaws_cloudtrail:0000173:f9e0d3b4-f127-4b4a-acd7-445dfaf9de1a", "row_index": 173, "timestamp": "2017-05-26T22:45:02Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAEJK50GCJVY8P9L73", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 969, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9e0d3b4-f127-4b4a-acd7-445dfaf9de1a", "eventTime": "2017-05-26T22:45:02Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAEJK50GCJVY8P9L73", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:01Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51d3c09b-2e17-4ac7-8956-66902f440711", "record_id": "flaws_cloudtrail:0000174:51d3c09b-2e17-4ac7-8956-66902f440711", "row_index": 174, "timestamp": "2017-05-26T22:45:03Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA1S6AYXJ4X06C7EOE", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51d3c09b-2e17-4ac7-8956-66902f440711", "eventTime": "2017-05-26T22:45:03Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA1S6AYXJ4X06C7EOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ced5a927-9dee-4f95-b99a-e442c2aa9e97", "record_id": "flaws_cloudtrail:0000175:ced5a927-9dee-4f95-b99a-e442c2aa9e97", "row_index": 175, "timestamp": "2017-05-26T22:45:04Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA1S6AYXJ4X06C7EOE", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ced5a927-9dee-4f95-b99a-e442c2aa9e97", "eventTime": "2017-05-26T22:45:04Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA1S6AYXJ4X06C7EOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f767bac1-7946-405b-bd2f-c6cb9906f20d", "record_id": "flaws_cloudtrail:0000176:f767bac1-7946-405b-bd2f-c6cb9906f20d", "row_index": 176, "timestamp": "2017-05-26T22:45:06Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA1S6AYXJ4X06C7EOE", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f767bac1-7946-405b-bd2f-c6cb9906f20d", "eventTime": "2017-05-26T22:45:06Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA1S6AYXJ4X06C7EOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b64c9895-edd1-4801-bc15-86b3b8e36860", "record_id": "flaws_cloudtrail:0000177:b64c9895-edd1-4801-bc15-86b3b8e36860", "row_index": 177, "timestamp": "2017-05-26T22:45:07Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA1S6AYXJ4X06C7EOE", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b64c9895-edd1-4801-bc15-86b3b8e36860", "eventTime": "2017-05-26T22:45:07Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA1S6AYXJ4X06C7EOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d159acd-c0b5-4e36-b14a-a4537e5e1f97", "record_id": "flaws_cloudtrail:0000178:8d159acd-c0b5-4e36-b14a-a4537e5e1f97", "row_index": 178, "timestamp": "2017-05-26T22:45:08Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA1S6AYXJ4X06C7EOE", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d159acd-c0b5-4e36-b14a-a4537e5e1f97", "eventTime": "2017-05-26T22:45:08Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA1S6AYXJ4X06C7EOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4cf27af2-a882-4851-bac4-0daa5c787ad2", "record_id": "flaws_cloudtrail:0000179:4cf27af2-a882-4851-bac4-0daa5c787ad2", "row_index": 179, "timestamp": "2017-05-26T22:45:09Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA1S6AYXJ4X06C7EOE", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4cf27af2-a882-4851-bac4-0daa5c787ad2", "eventTime": "2017-05-26T22:45:09Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA1S6AYXJ4X06C7EOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d7d3893-4053-4cc7-851b-e64cdbc6d5e9", "record_id": "flaws_cloudtrail:0000180:4d7d3893-4053-4cc7-851b-e64cdbc6d5e9", "row_index": 180, "timestamp": "2017-05-26T22:45:09Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA1S6AYXJ4X06C7EOE", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d7d3893-4053-4cc7-851b-e64cdbc6d5e9", "eventTime": "2017-05-26T22:45:09Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA1S6AYXJ4X06C7EOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09ab74d9-15c6-4e39-9ab6-a1c6d01e77aa", "record_id": "flaws_cloudtrail:0000181:09ab74d9-15c6-4e39-9ab6-a1c6d01e77aa", "row_index": 181, "timestamp": "2017-05-26T22:45:10Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA1S6AYXJ4X06C7EOE", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09ab74d9-15c6-4e39-9ab6-a1c6d01e77aa", "eventTime": "2017-05-26T22:45:10Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA1S6AYXJ4X06C7EOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2be572f8-1e2f-4c58-823c-a4c2386d9de4", "record_id": "flaws_cloudtrail:0000182:2be572f8-1e2f-4c58-823c-a4c2386d9de4", "row_index": 182, "timestamp": "2017-05-26T22:45:11Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA1S6AYXJ4X06C7EOE", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2be572f8-1e2f-4c58-823c-a4c2386d9de4", "eventTime": "2017-05-26T22:45:11Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA1S6AYXJ4X06C7EOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "abf11ad2-b717-4b67-a05c-3444406e8aed", "record_id": "flaws_cloudtrail:0000183:abf11ad2-b717-4b67-a05c-3444406e8aed", "row_index": 183, "timestamp": "2017-05-26T22:45:12Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA1S6AYXJ4X06C7EOE", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "abf11ad2-b717-4b67-a05c-3444406e8aed", "eventTime": "2017-05-26T22:45:12Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA1S6AYXJ4X06C7EOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b1180a4-c2bb-41b0-b954-6ce875a771648", "record_id": "flaws_cloudtrail:0000184:0b1180a4-c2bb-41b0-b954-6ce875a771648", "row_index": 184, "timestamp": "2017-05-26T22:45:13Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA1S6AYXJ4X06C7EOE", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b1180a4-c2bb-41b0-b954-6ce875a771648", "eventTime": "2017-05-26T22:45:13Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA1S6AYXJ4X06C7EOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e211f76-84b8-43a6-b94b-70702aa14b57", "record_id": "flaws_cloudtrail:0000185:4e211f76-84b8-43a6-b94b-70702aa14b57", "row_index": 185, "timestamp": "2017-05-26T22:45:13Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA1S6AYXJ4X06C7EOE", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e211f76-84b8-43a6-b94b-70702aa14b57", "eventTime": "2017-05-26T22:45:13Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA1S6AYXJ4X06C7EOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "054449c-04f0-4513-8a61-327b923e8ae0", "record_id": "flaws_cloudtrail:0000186:054449c-04f0-4513-8a61-327b923e8ae0", "row_index": 186, "timestamp": "2017-05-26T22:45:14Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA1S6AYXJ4X06C7EOE", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "054449c-04f0-4513-8a61-327b923e8ae0", "eventTime": "2017-05-26T22:45:14Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA1S6AYXJ4X06C7EOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a833f681-9fd0-4cca-b1a6-df4dba22f589", "record_id": "flaws_cloudtrail:0000187:a833f681-9fd0-4cca-b1a6-df4dba22f589", "row_index": 187, "timestamp": "2017-05-26T22:45:14Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA1S6AYXJ4X06C7EOE", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a833f681-9fd0-4cca-b1a6-df4dba22f589", "eventTime": "2017-05-26T22:45:14Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA1S6AYXJ4X06C7EOE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3aa44e6-4244-4a73-8bb2-5e7e7c5d57f4", "record_id": "flaws_cloudtrail:0000188:f3aa44e6-4244-4a73-8bb2-5e7e7c5d57f4", "row_index": 188, "timestamp": "2017-05-26T22:45:15Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3aa44e6-4244-4a73-8bb2-5e7e7c5d57f4", "eventTime": "2017-05-26T22:45:15Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAQJ7GIRZKS4IW36CA", "expiration": "May 26, 2017 11:45:15 PM", "sessionToken": "FQoDYXdzECAaDDbPqWMV47mo0Kq2OyLMAQLXFVV+1YHNwHxxY+EMEL/tR8x9QfyUp1DJzlyBWNepGMIiJlwjWimECXfGdTibT7Trk/Q9Om1wf71NmjcSt7vM+lH5xxj381Nu/0nxCvdkvhlcMRkR9AlIg/EJgcXFyjtZ01b78J/ZhXlyZQOws4AUoHjKLtAOaifXLTTcKoA28p/ef911cCiJbak7HlfAAB5+TnUuBTt35+bbNSTwk3FQofn7xBmVfBEgoqFfIbEDNIjPBGFqx31jxuXq/o2v2QUYHXG1VcfLC31klCj736LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73725c-ff31-4af7-b7b2-d0eaba628f5a", "record_id": "flaws_cloudtrail:0000189:73725c-ff31-4af7-b7b2-d0eaba628f5a", "row_index": 189, "timestamp": "2017-05-26T22:45:16Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAQJ7GIRZKS4IW36CA", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1031, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73725c-ff31-4af7-b7b2-d0eaba628f5a", "eventTime": "2017-05-26T22:45:16Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAQJ7GIRZKS4IW36CA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:15Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71cf129e-7ad1-4126-931d-130e2eef5330", "record_id": "flaws_cloudtrail:0000190:71cf129e-7ad1-4126-931d-130e2eef5330", "row_index": 190, "timestamp": "2017-05-26T22:45:17Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAQJ7GIRZKS4IW36CA", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1032, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71cf129e-7ad1-4126-931d-130e2eef5330", "eventTime": "2017-05-26T22:45:17Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAQJ7GIRZKS4IW36CA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:15Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19060b-1dbb-47ea-ab28-9e933ee6cdd0", "record_id": "flaws_cloudtrail:0000191:19060b-1dbb-47ea-ab28-9e933ee6cdd0", "row_index": 191, "timestamp": "2017-05-26T22:45:18Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAQJ7GIRZKS4IW36CA", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1027, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19060b-1dbb-47ea-ab28-9e933ee6cdd0", "eventTime": "2017-05-26T22:45:18Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAQJ7GIRZKS4IW36CA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:15Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1abe0270-7b99-422b-a8d5-5291f41747e0", "record_id": "flaws_cloudtrail:0000192:1abe0270-7b99-422b-a8d5-5291f41747e0", "row_index": 192, "timestamp": "2017-05-26T22:45:19Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAQJ7GIRZKS4IW36CA", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1033, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1abe0270-7b99-422b-a8d5-5291f41747e0", "eventTime": "2017-05-26T22:45:19Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAQJ7GIRZKS4IW36CA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:15Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cea4b6b3-5b29-405c-a8a1-2fd3cc8b0107", "record_id": "flaws_cloudtrail:0000193:cea4b6b3-5b29-405c-a8a1-2fd3cc8b0107", "row_index": 193, "timestamp": "2017-05-26T22:45:21Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAQJ7GIRZKS4IW36CA", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1033, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cea4b6b3-5b29-405c-a8a1-2fd3cc8b0107", "eventTime": "2017-05-26T22:45:21Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAQJ7GIRZKS4IW36CA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:15Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f096b7a-6ee8-489c-9ffa-6c0712f01bc4", "record_id": "flaws_cloudtrail:0000194:0f096b7a-6ee8-489c-9ffa-6c0712f01bc4", "row_index": 194, "timestamp": "2017-05-26T22:45:21Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAQJ7GIRZKS4IW36CA", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1031, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f096b7a-6ee8-489c-9ffa-6c0712f01bc4", "eventTime": "2017-05-26T22:45:21Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAQJ7GIRZKS4IW36CA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:15Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7df28014-28d3-4f40-9709-2a7f6d95a3af", "record_id": "flaws_cloudtrail:0000195:7df28014-28d3-4f40-9709-2a7f6d95a3af", "row_index": 195, "timestamp": "2017-05-26T22:45:22Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAQJ7GIRZKS4IW36CA", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1031, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7df28014-28d3-4f40-9709-2a7f6d95a3af", "eventTime": "2017-05-26T22:45:22Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAQJ7GIRZKS4IW36CA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:15Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "070cc9af-cdf1-45d1-94b3-9a191335eb3", "record_id": "flaws_cloudtrail:0000196:070cc9af-cdf1-45d1-94b3-9a191335eb3", "row_index": 196, "timestamp": "2017-05-26T22:45:23Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAQJ7GIRZKS4IW36CA", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1027, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "070cc9af-cdf1-45d1-94b3-9a191335eb3", "eventTime": "2017-05-26T22:45:23Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAQJ7GIRZKS4IW36CA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:15Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee6aa622-2b64-499e-b54e-6c955f010dd0", "record_id": "flaws_cloudtrail:0000197:ee6aa622-2b64-499e-b54e-6c955f010dd0", "row_index": 197, "timestamp": "2017-05-26T22:45:24Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAQJ7GIRZKS4IW36CA", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee6aa622-2b64-499e-b54e-6c955f010dd0", "eventTime": "2017-05-26T22:45:24Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAQJ7GIRZKS4IW36CA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:15Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "313a0683-7584-43f7-8acf-02f893cc3728", "record_id": "flaws_cloudtrail:0000198:313a0683-7584-43f7-8acf-02f893cc3728", "row_index": 198, "timestamp": "2017-05-26T22:45:25Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAQJ7GIRZKS4IW36CA", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "313a0683-7584-43f7-8acf-02f893cc3728", "eventTime": "2017-05-26T22:45:25Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAQJ7GIRZKS4IW36CA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:15Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "321593cd0-d87e-4868-8e76-b969b0e8b152", "record_id": "flaws_cloudtrail:0000199:321593cd0-d87e-4868-8e76-b969b0e8b152", "row_index": 199, "timestamp": "2017-05-26T22:45:26Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAQJ7GIRZKS4IW36CA", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1029, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "321593cd0-d87e-4868-8e76-b969b0e8b152", "eventTime": "2017-05-26T22:45:26Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAQJ7GIRZKS4IW36CA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:15Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5550bdf-ff06-4364-8b13-b5731fb94dcb", "record_id": "flaws_cloudtrail:0000200:f5550bdf-ff06-4364-8b13-b5731fb94dcb", "row_index": 200, "timestamp": "2017-05-26T22:45:26Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAQJ7GIRZKS4IW36CA", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5550bdf-ff06-4364-8b13-b5731fb94dcb", "eventTime": "2017-05-26T22:45:26Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAQJ7GIRZKS4IW36CA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:15Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5902bb6d-35ad-49be-b77b-3c1989b3d1ff", "record_id": "flaws_cloudtrail:0000201:5902bb6d-35ad-49be-b77b-3c1989b3d1ff", "row_index": 201, "timestamp": "2017-05-26T22:45:26Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAQJ7GIRZKS4IW36CA", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5902bb6d-35ad-49be-b77b-3c1989b3d1ff", "eventTime": "2017-05-26T22:45:26Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAQJ7GIRZKS4IW36CA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:15Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "472912a98-5bc5-4ee4-8535-99d1ae356fea", "record_id": "flaws_cloudtrail:0000202:472912a98-5bc5-4ee4-8535-99d1ae356fea", "row_index": 202, "timestamp": "2017-05-26T22:45:27Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1455, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "472912a98-5bc5-4ee4-8535-99d1ae356fea", "eventTime": "2017-05-26T22:45:27Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAKWFZQKT2KIG01QZ7", "expiration": "May 26, 2017 11:45:27 PM", "sessionToken": "FQoDYXdzECAaDHkHKQ5zTBkYNcyWESLMAdHAPLQ3DBKAnFU/iGpu19eyrvVYYHg34W+zjSPLCAtbDYMugGsoYXml4NK1eDJ39Ncpb4o4BP2W6deQZTKxE7Se2HeLf0xKC4aNvlTA+vv9yqhZXjkq/jzUG0dytdZTTrihymcZ4zeZRC71EdsJb+Ch03LeenrcF6y9Ix0B4o08q9yI2mYs/KHFqdYch7C+n5C2SfYYx9baUbeD9sWI47l0+fwvsuXZwDRtC57/vrl6IJJ3eYJJdjAgC1v4IkEcZPRcefwU+6ibjqyrIiiH4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b50dbc2b-f19d-4719-80d5-78d5b212a460", "record_id": "flaws_cloudtrail:0000203:b50dbc2b-f19d-4719-80d5-78d5b212a460", "row_index": 203, "timestamp": "2017-05-26T22:45:27Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAQJ7GIRZKS4IW36CA", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b50dbc2b-f19d-4719-80d5-78d5b212a460", "eventTime": "2017-05-26T22:45:27Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAQJ7GIRZKS4IW36CA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:15Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f853286-9b5d-47f1-8257-62510c1a4db1", "record_id": "flaws_cloudtrail:0000204:1f853286-9b5d-47f1-8257-62510c1a4db1", "row_index": 204, "timestamp": "2017-05-26T22:45:28Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f853286-9b5d-47f1-8257-62510c1a4db1", "eventTime": "2017-05-26T22:45:28Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAX8MV17KYNNLV1107", "expiration": "May 26, 2017 11:45:28 PM", "sessionToken": "FQoDYXdzECAaDII50ivMXlKwEicGciLMAQ3sAARjRj8sX26RLaxIOn97xZwL6now2G07lWER/M0IkqbK7V3Nj44WmlWhvKeBs9wgSZkxH4Y04mh0h0t1TzioYNCKZhFQ1HiZ9urXlJiaasUEFaGw9j+6yBgk5juSX9xoxabj3t4KV5BB/GGxSuRf24eJxuRAEOEHmnJALGFP8RxrGYoMHlmzLAOBsmkb3M3N4k1QCHGjpfrMjMFhVjmns0ZDd44DEnObvD6QHSjJPBCnVkIjteJaTHqfxKLn1hN+wfdrutpTcLNLGiiI4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39ae4aec-4396-4e76-aad4-8ab86ff81a8a", "record_id": "flaws_cloudtrail:0000205:39ae4aec-4396-4e76-aad4-8ab86ff81a8a", "row_index": 205, "timestamp": "2017-05-26T22:45:28Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAX8MV17KYNNLV1107", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 950, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39ae4aec-4396-4e76-aad4-8ab86ff81a8a", "eventTime": "2017-05-26T22:45:28Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAX8MV17KYNNLV1107", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:28Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a8bfcd5-37a3-42ae-962e-07db25e4377f", "record_id": "flaws_cloudtrail:0000206:0a8bfcd5-37a3-42ae-962e-07db25e4377f", "row_index": 206, "timestamp": "2017-05-26T22:45:28Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAKWFZQKT2KIG01QZ7", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 950, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a8bfcd5-37a3-42ae-962e-07db25e4377f", "eventTime": "2017-05-26T22:45:28Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAKWFZQKT2KIG01QZ7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:27Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94081f9-d2d1-421d-9a94-32c29bf02ef9", "record_id": "flaws_cloudtrail:0000207:94081f9-d2d1-421d-9a94-32c29bf02ef9", "row_index": 207, "timestamp": "2017-05-26T22:45:29Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1451, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94081f9-d2d1-421d-9a94-32c29bf02ef9", "eventTime": "2017-05-26T22:45:29Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAK2NIV789TQM8H512", "expiration": "May 26, 2017 11:45:29 PM", "sessionToken": "FQoDYXdzECAaDPIat69Z/A1aC+CQiCLMAd/JqA5WMGUeAzwXyZNBszbFpeDEBGoKRwUrN4Mv16BR42NsaIpCaY7fhClDyF/t6n1ZBNZ1qUwhWYkvHU37yDEyJiLCCAisT2EAC495mtKIUhpns2HOqjbVn4n/6jEf3E9uodjxc1sMRWdr0BhAM7SONQSXaVWHDQUFhETmGplcKLLICOIYszJoPHyfu5tnczxtID1ECwir8I1B+fv6Rx45tuM9Pxd7oCiekRXwjsuXyN8QuLOXoPepiToUUye6yVCpz0xT66blClqbjCiJ4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ccf059ce-1356-4c62-bc44-e8aaa32ceba9", "record_id": "flaws_cloudtrail:0000208:ccf059ce-1356-4c62-bc44-e8aaa32ceba9", "row_index": 208, "timestamp": "2017-05-26T22:45:30Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAK2NIV789TQM8H512", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 956, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ccf059ce-1356-4c62-bc44-e8aaa32ceba9", "eventTime": "2017-05-26T22:45:30Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAK2NIV789TQM8H512", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:29Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47e88ec6-e283-4549-bd94-054b8600fb61", "record_id": "flaws_cloudtrail:0000209:47e88ec6-e283-4549-bd94-054b8600fb61", "row_index": 209, "timestamp": "2017-05-26T22:45:30Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47e88ec6-e283-4549-bd94-054b8600fb61", "eventTime": "2017-05-26T22:45:30Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA0QREICT7IE69JFUG", "expiration": "May 26, 2017 11:45:30 PM", "sessionToken": "FQoDYXdzECAaDNh5FVOdYC8OWDCqaSLMAfAG69pIda8emRiBV95RIMT7+pIQbcQx5q7JFJWkocr55dvFyrVWuWXOKliRsJ7rvVSwFVnGkMti444fIwr88fMgkPxJk1gN+AxL1E+P4Qiobs1Y40+W8ld9xLWQk5VK5ipXomvrNVI1pXjHJ1iZrnyqkr0x7OpKoWQnorie8llh98XVdeqyIqaWCXcrxV7JiLR6CopW/rVaLN7FXB3scfesqGw/83wAUqxiTXnGgKeSnrmTQFX4IXw3RoQOm+lffaktWrz/MrzIkwX8tyiK4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37bac940-bfed-4abb-b69d-0210ffebd322", "record_id": "flaws_cloudtrail:0000210:37bac940-bfed-4abb-b69d-0210ffebd322", "row_index": 210, "timestamp": "2017-05-26T22:45:31Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA0QREICT7IE69JFUG", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 955, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37bac940-bfed-4abb-b69d-0210ffebd322", "eventTime": "2017-05-26T22:45:31Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA0QREICT7IE69JFUG", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:30Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7facd854-f2b9-433d-82b6-e66a078a0d77", "record_id": "flaws_cloudtrail:0000211:7facd854-f2b9-433d-82b6-e66a078a0d77", "row_index": 211, "timestamp": "2017-05-26T22:45:31Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7facd854-f2b9-433d-82b6-e66a078a0d77", "eventTime": "2017-05-26T22:45:31Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAYZH3OMJKANF97G3S", "expiration": "May 26, 2017 11:45:31 PM", "sessionToken": "FQoDYXdzECAaDOzGVo15Y02ZX7F6dCLMAbM+d3nSBkeaEa8euq+lfURmVho6wHjwO1W8O73Fd2mkFK281WM2OEaiG/+MkJqiMSxcziHPrHOgJ5faPmWuETdU24oP6zRgSCzbRda7cOXEAfw8XGZwwhfweXuO4zBJ47YSiyCIxEl5Y/6UyTfcRFZM/xjlQANxSapuonCyXRQrJQkLCWHJKfk3znMJqambF5glaDLCtGXnjHJu6Rha0pumIrxDHfT3DMZvGCLEGgsYLWbLbNZis8WtXpv7tVv7Ue3gpQtPvV1GoP4NPyiL4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49aab907-6890-4ecd-8b61-d128483d998b", "record_id": "flaws_cloudtrail:0000212:49aab907-6890-4ecd-8b61-d128483d998b", "row_index": 212, "timestamp": "2017-05-26T22:45:32Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAYZH3OMJKANF97G3S", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 950, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49aab907-6890-4ecd-8b61-d128483d998b", "eventTime": "2017-05-26T22:45:32Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAYZH3OMJKANF97G3S", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:31Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06955-8d36-4313-bb05-409ebad660154", "record_id": "flaws_cloudtrail:0000213:06955-8d36-4313-bb05-409ebad660154", "row_index": 213, "timestamp": "2017-05-26T22:45:33Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAQMXMDUJOBV864E8H", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 953, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06955-8d36-4313-bb05-409ebad660154", "eventTime": "2017-05-26T22:45:33Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAQMXMDUJOBV864E8H", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:33Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd769fae-8c14-4bde-bc4f-4e030b998170", "record_id": "flaws_cloudtrail:0000214:dd769fae-8c14-4bde-bc4f-4e030b998170", "row_index": 214, "timestamp": "2017-05-26T22:45:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd769fae-8c14-4bde-bc4f-4e030b998170", "eventTime": "2017-05-26T22:45:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAQMXMDUJOBV864E8H", "expiration": "May 26, 2017 11:45:33 PM", "sessionToken": "FQoDYXdzECAaDCgPmapxgsJKz9Wz2iLMARCMDfTNU4rcMpJoWfh7D+ec3XP7Kut1oL5U9n33uWlhFYwW8uB9mMXoNY2OxqWGmSEGr8gEw1iDwo7uxN2QMvWRzaPbSQ/sSsgMEJJ2bTrY59fJFP/VqhN2cbgxCQujGDM8LyA6or4mUbFH8+sXb66/FFK8g1mSXwmBR7sFTNmsruKSnKdhyqLQo4/uNRDzMtOmKC2NgaHcFCYm7PHriS74jLH6LI03pb5/pRWq7/HnOcTKq29c1di2sfGepfRrL/drygtH60wkwWN77iiN4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e9ad034-e4ad-41b9-b5dd-9f5ddec90bd3", "record_id": "flaws_cloudtrail:0000215:3e9ad034-e4ad-41b9-b5dd-9f5ddec90bd3", "row_index": 215, "timestamp": "2017-05-26T22:45:34Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e9ad034-e4ad-41b9-b5dd-9f5ddec90bd3", "eventTime": "2017-05-26T22:45:34Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAW020HV2IXLQ0PNHH", "expiration": "May 26, 2017 11:45:34 PM", "sessionToken": "FQoDYXdzECAaDPRvqSUC39e8Efgh0CLMAVZxgydNEN7yMa3pQqLbAndfLeE4H8S27xxQNYS/CCq1ooEzfFjhbforRg15imoLvYCIJzc2sIakacI/sQT82E5XIacUzU6+/Sg4FIeyZL5t392V5oy5XdGaqQfGlE+pjlbTj/t1VQ2UGsiBxXaGO2CxHJMZvbuuNlUYACQaNl43Dvlkn5HDfGiQ1OSCEdLCdpMe8DJqnVC0AtdnOPjzmgdwjBCuvRe83PjmwhGfah1YiU4i1iodO/rDEH0bRiqpNObKbea8xxHRQLXpPyiO4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d896425b-86a5-4da7-bbad-f2cce431d7c6", "record_id": "flaws_cloudtrail:0000216:5d896425b-86a5-4da7-bbad-f2cce431d7c6", "row_index": 216, "timestamp": "2017-05-26T22:45:34Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1455, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d896425b-86a5-4da7-bbad-f2cce431d7c6", "eventTime": "2017-05-26T22:45:34Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA8XEVDTL0D9M0G027", "expiration": "May 26, 2017 11:45:34 PM", "sessionToken": "FQoDYXdzECAaDFo2FAWl/WJU7oXTWyLMAZn/SGyp1MV+zVs1EjjLBTyFSqaVzLiTb0pEaGpxaCUag70b7pwDFJ88baiD0EY/To7Ayj19PUTqNmdbeY/yQQ0qn6WRzAAwQqcopbyEu0r7kpOhiFjPNtisGR0OiAa7YFHaS3j85v8N45mHkyUCiGMvp0iznVMdFPWoiBLdjv+a66zf8H40Duab+thmW/7pt27tH4Q2nLp9WX11gxUJwhyFkkaIqZn1VHipAjnsHXqopnRFBYyHHGInVYXtQNZ5JdPhzkGfEYJQ4h9l+iiO4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba75e0d1-9e1a-48e5-891a-b1d8b1ce4b98", "record_id": "flaws_cloudtrail:0000217:ba75e0d1-9e1a-48e5-891a-b1d8b1ce4b98", "row_index": 217, "timestamp": "2017-05-26T22:45:34Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA8XEVDTL0D9M0G027", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 947, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba75e0d1-9e1a-48e5-891a-b1d8b1ce4b98", "eventTime": "2017-05-26T22:45:34Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA8XEVDTL0D9M0G027", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:34Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bae258008-4516-408d-83f0-687277bd8e70f", "record_id": "flaws_cloudtrail:0000218:bae258008-4516-408d-83f0-687277bd8e70f", "row_index": 218, "timestamp": "2017-05-26T22:45:35Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAW020HV2IXLQ0PNHH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 957, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bae258008-4516-408d-83f0-687277bd8e70f", "eventTime": "2017-05-26T22:45:35Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAW020HV2IXLQ0PNHH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:34Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3546a911-bd68-49d4-a605-98bd071e6a1c", "record_id": "flaws_cloudtrail:0000219:3546a911-bd68-49d4-a605-98bd071e6a1c", "row_index": 219, "timestamp": "2017-05-26T22:45:36Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA7PWFRJV7K0MUKW2C", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 953, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3546a911-bd68-49d4-a605-98bd071e6a1c", "eventTime": "2017-05-26T22:45:36Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA7PWFRJV7K0MUKW2C", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:36Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58be3927-ec61-489d-9a7d-51636570e4fc", "record_id": "flaws_cloudtrail:0000220:58be3927-ec61-489d-9a7d-51636570e4fc", "row_index": 220, "timestamp": "2017-05-26T22:45:36Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58be3927-ec61-489d-9a7d-51636570e4fc", "eventTime": "2017-05-26T22:45:36Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA7PWFRJV7K0MUKW2C", "expiration": "May 26, 2017 11:45:36 PM", "sessionToken": "FQoDYXdzECAaDLspIfAB5XPZxOyfiiLMAVOBIP2FowZUGp0HGsR5BlFDZkQpBmkMfzGJvoPf7KWJ0011L3Z1g/X9NB4cZChcLjamBRPeaaWDcDnodkgvFtkirWMmA6sfTQF6Y7O1V8JbcdnsLpzMYHsqeD3f0likQjNLJ81+hsBKeobj8fl5bWfFMMiyYf/GOZFc3B+s4iwvD8/r1DGzazjHlKydPc+fZC/+AHYxlhc+XFXJalPfQ1yJhhQQ2Z2bD7Md3Ium3C3w9P925ABIRmIfpUquFsU73FrI4j6U5LOyyuu0DCiQ4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ebca970-b7ea-4583-8b85-6ad75a55ea26", "record_id": "flaws_cloudtrail:0000221:9ebca970-b7ea-4583-8b85-6ad75a55ea26", "row_index": 221, "timestamp": "2017-05-26T22:45:37Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ebca970-b7ea-4583-8b85-6ad75a55ea26", "eventTime": "2017-05-26T22:45:37Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAUIFOP2QHOTOYIBN6", "expiration": "May 26, 2017 11:45:37 PM", "sessionToken": "FQoDYXdzECAaDPg9MIsvpAMX3be5wiLMARQRt2k/0WCGedEZZKLs7GqD5JBqmp7eD06IvYxUGYuuXx2eDu2I2phLPQ3i+8IuLLT78FougHDGYit4T2o4KByV0yyVT2R0ydsRfbbICWlNZnMOdkDBYNvy4459n5vgpx4RfUu6RnnwrDWPGzNNdkpvnaJPZMdjt21ISD1T+KsanC/W/AidCtJXjLXqG0mdsSLpZQGtD4HwqUz0R2naL+j/JJdY6yf4A03Iz4ckQoYXf+ghxJE5KlB8NRwnFSDct0Tj34/Bhs6UARjT4yiR4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25dbce6f-8f07-4001-81ee-5cbd48117635", "record_id": "flaws_cloudtrail:0000222:25dbce6f-8f07-4001-81ee-5cbd48117635", "row_index": 222, "timestamp": "2017-05-26T22:45:38Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25dbce6f-8f07-4001-81ee-5cbd48117635", "eventTime": "2017-05-26T22:45:38Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAZC1GBMEGWA17M3J2", "expiration": "May 26, 2017 11:45:38 PM", "sessionToken": "FQoDYXdzECAaDBSgzYDRs1Jt3Jfw2iLMAXqtRlTAm7nPbPWbxdupjNzhA0VY8YME3/sRKZp8MN2pKHSoFqwolxIF9dr00Om/fgwMd+/ffV1yXV0NRaQWwEc2aIFQUG4g3AcjX98JcqGVyw0MQD/D9snyoxNdVnkHc0kkBWIqQKlKAjCGY8f2Pl/nj+IBFQgmOWeQTwPifc26dhm2dvbNK75xnbKqWu+D+A2ffAwnF2DjKKm6xoW6OvIUp/OhpDso0ATsM8quWKtpipwTFIDAen8sYzfjkG6gMYmf6/qliVKmQaBWCCiS4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2168d6ab-97bf-4d8e-81ad-8110e135b1b8", "record_id": "flaws_cloudtrail:0000223:2168d6ab-97bf-4d8e-81ad-8110e135b1b8", "row_index": 223, "timestamp": "2017-05-26T22:45:38Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAZC1GBMEGWA17M3J2", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 950, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2168d6ab-97bf-4d8e-81ad-8110e135b1b8", "eventTime": "2017-05-26T22:45:38Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAZC1GBMEGWA17M3J2", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4bac6724-9476-428f-b0c3-480c53fab44f", "record_id": "flaws_cloudtrail:0000224:4bac6724-9476-428f-b0c3-480c53fab44f", "row_index": 224, "timestamp": "2017-05-26T22:45:39Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4bac6724-9476-428f-b0c3-480c53fab44f", "eventTime": "2017-05-26T22:45:39Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAW8ID85E4PUDI9RSU", "expiration": "May 26, 2017 11:45:39 PM", "sessionToken": "FQoDYXdzECAaDDWOHA+xoUEeTnezySLMAS9vgO2bPch1hlIQLjtifjFb7+SXJvN7MUZB96NZO6oZ1CH+u8qkWwvAbAminH1u5KW9RRW0REUnPBpraIfAO6asVUzkJaxFUvWxiipBnNEx2jNl3x/4B1fPBQbcleoJWBWG1mttEqHz8LiZneOY4Kwq0luy+HQal3ZbpXbGqxFWhr7sW9iv9woOrX2CG58ahQihsZasy8ajnWnueHMbQakWq5Ut9lcKGVp+Q3N083te9gLwHwAX14BxEStrjpLfTxWAdl6dbW8EB/XflCiT4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8895e3a-55db-4f61-9af9-3e9136d940d0", "record_id": "flaws_cloudtrail:0000225:c8895e3a-55db-4f61-9af9-3e9136d940d0", "row_index": 225, "timestamp": "2017-05-26T22:45:39Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8895e3a-55db-4f61-9af9-3e9136d940d0", "eventTime": "2017-05-26T22:45:39Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAO6UTIFIVR6IOW4HK", "expiration": "May 26, 2017 11:45:39 PM", "sessionToken": "FQoDYXdzECAaDNgzMc/LP1yx9LLbmyLMAbrbWz6t1iuZ6pxgms4ZsGgkej+FDDJHRZV4uVR/I6rPdH8Zju6CBpRuJcBak/uQVwXlu4y/RIRXF2TwtstFZSqj/5tLYEghTmhWSV2OWIsCoJQnNuL36VNYdETtY8Ly1julGHPBt9fzXf1Xijm1KmFq8raxW54gRZy/0fuOxmRRvpqWRtZGMd1RSLTAv0r2lCl4STt49K+M7xrEDQNQcXV+cQ1fmuwbRiXoH4D5oNBb8b1rEe3DNQtmU+xYVhf+frMPSAakR49FZ4lB/SiT4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1ed6124-e230-4fd2-a4ad-cf874acff120", "record_id": "flaws_cloudtrail:0000226:c1ed6124-e230-4fd2-a4ad-cf874acff120", "row_index": 226, "timestamp": "2017-05-26T22:45:41Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAW8ID85E4PUDI9RSU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 951, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1ed6124-e230-4fd2-a4ad-cf874acff120", "eventTime": "2017-05-26T22:45:41Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAW8ID85E4PUDI9RSU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:39Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2caaa091-de95-40f7-b256-6f7191d6df70", "record_id": "flaws_cloudtrail:0000227:2caaa091-de95-40f7-b256-6f7191d6df70", "row_index": 227, "timestamp": "2017-05-26T22:45:41Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2caaa091-de95-40f7-b256-6f7191d6df70", "eventTime": "2017-05-26T22:45:41Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA4LHO7DFXU57BVB8M", "expiration": "May 26, 2017 11:45:41 PM", "sessionToken": "FQoDYXdzECAaDIEL7a2pZtXSEkFC0iLMAR5dvPh9tpI6DlC++r4TdwDQvsgrw+RFcyP1UvaVa7JzTpP2i30fH+YJAFGKovQkz7+dYRVNXuujhDnqFS3rllNMK6T4aW09qIBp8r17VrLbsHIc133gddMor8NSQMJNu37qItjGY9x59Aom60uxJekMyuMPOXWJNz3NSikubeyuBp4TaR+YU+53c8VLRS3/7K5Xn9r1TA9koLCqOLFbb2TtQ21k9vsbmv5PWkWn9L6pPi0fHg2E9ez0N4jR1iWe4XkfGhebHZkR5CYfdyiV4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "853336c5-dede-4302-8f5f-1a63f811a41b", "record_id": "flaws_cloudtrail:0000228:853336c5-dede-4302-8f5f-1a63f811a41b", "row_index": 228, "timestamp": "2017-05-26T22:45:42Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA4LHO7DFXU57BVB8M", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 953, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "853336c5-dede-4302-8f5f-1a63f811a41b", "eventTime": "2017-05-26T22:45:42Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA4LHO7DFXU57BVB8M", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:41Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8cce373e-dcde-411d-b6a7-0bb00c5dba2b", "record_id": "flaws_cloudtrail:0000229:8cce373e-dcde-411d-b6a7-0bb00c5dba2b", "row_index": 229, "timestamp": "2017-05-26T22:45:42Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8cce373e-dcde-411d-b6a7-0bb00c5dba2b", "eventTime": "2017-05-26T22:45:42Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA4BKW5292X78GO9C3", "expiration": "May 26, 2017 11:45:42 PM", "sessionToken": "FQoDYXdzECAaDAT7c81h3ogrz2NK4CLMAR0GfoMqQ1JOBObkg6bjLN+MzTDFujxiVnI6n6tWCsGSDTL4moZVOLzR1M/1aUDhEt/m5ZHrSQV1hk+QNmR6kwdwyOrzCgKcgvXm4ADW+9qKWnn1OrwGE2aeKAfXlE/hSduiBjqowYKuGW34Rqazbf8S5F+x+9OF0P57Pa+TnJu5ONvfw7Ifa6niWSflm7Jr5ZMett38gaiud+rMidyuQUH20642aFNcj6DzaE3yucBApn4RpYxhHv3914SPkNZUDCobUFkVuo1+F4wETyiW4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50fe25e0-a9be-4d08-ad98-b0dc14425ae", "record_id": "flaws_cloudtrail:0000230:50fe25e0-a9be-4d08-ad98-b0dc14425ae", "row_index": 230, "timestamp": "2017-05-26T22:45:43Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA4BKW5292X78GO9C3", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 949, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50fe25e0-a9be-4d08-ad98-b0dc14425ae", "eventTime": "2017-05-26T22:45:43Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA4BKW5292X78GO9C3", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:42Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a4a5bb3-f7ac-4503-982c-242eeb7736cb", "record_id": "flaws_cloudtrail:0000231:6a4a5bb3-f7ac-4503-982c-242eeb7736cb", "row_index": 231, "timestamp": "2017-05-26T22:45:43Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a4a5bb3-f7ac-4503-982c-242eeb7736cb", "eventTime": "2017-05-26T22:45:43Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAJNPPBFLAOR6KSH0X", "expiration": "May 26, 2017 11:45:43 PM", "sessionToken": "FQoDYXdzECAaDNALZfUH9f0hN7Cp/yLMAT87CrnRCroCdDAYP06tcBqjlZ273v5reQIjnta7DUMGo84PHUH9ETGMUoUvbAUKV7LeolEQ6ebbFgbgjnqjh9NLStIgupwJzReY+hKckoZHS/CzZNMYv5fka1UFgdBMPvpacyScSQhknljMc1+dOxF8Z1Ir20MV6PTSemeCznKSAa0E89byxgmIuyuZqlCPSWUghZPAL40kxDwT6uSw7cRyqH+6ayDKJ9D2GbyWDLHxypvU0JgFrWn2NABKboe46lSugwVB31vc1+OTlSiX4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a59e9d1-2a10-4f59-855d-bc6119ffc6e0", "record_id": "flaws_cloudtrail:0000232:8a59e9d1-2a10-4f59-855d-bc6119ffc6e0", "row_index": 232, "timestamp": "2017-05-26T22:45:44Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAJNPPBFLAOR6KSH0X", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 950, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a59e9d1-2a10-4f59-855d-bc6119ffc6e0", "eventTime": "2017-05-26T22:45:44Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAJNPPBFLAOR6KSH0X", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:43Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11106c9-82fc-489d-bd7e-4889e12f7ee5", "record_id": "flaws_cloudtrail:0000233:11106c9-82fc-489d-bd7e-4889e12f7ee5", "row_index": 233, "timestamp": "2017-05-26T22:45:44Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11106c9-82fc-489d-bd7e-4889e12f7ee5", "eventTime": "2017-05-26T22:45:44Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA4U7C9HD86ULUE12U", "expiration": "May 26, 2017 11:45:44 PM", "sessionToken": "FQoDYXdzECAaDIvhgyvfQgThuEEWtCLMAdeOok3BqlE6Fx+yZ2ELuGeLZPrFFcMG2cUNoCp3nVNJ2MiKlWg+j9wOXadzQ7V31qtVu84fMpuQqho9cTkpi1VVALDi4uRKUdmLOWO/QKV1UKWHihoUh0ZpoXgoXm3P/6/gjUGKwRcQ+4ATTTc1271FJ5TlUn40Gjaunf7I3oTSkTLyu60VisNIQCPn6swp4L3z95Tf7zNZ5jv+tOl12vt+58U5CvPzILjhWC5FMn/hux4PPSVvaRoNHQl/PPCl8oSI268ReQ9Hej0oaSiY4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2fc667841-1ad6-4e69-88df-913b5144f406", "record_id": "flaws_cloudtrail:0000234:2fc667841-1ad6-4e69-88df-913b5144f406", "row_index": 234, "timestamp": "2017-05-26T22:45:45Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIATY59NTJU7TBL3RUK", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2fc667841-1ad6-4e69-88df-913b5144f406", "eventTime": "2017-05-26T22:45:45Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIATY59NTJU7TBL3RUK", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:45Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "754318a1-c10d-417f-bea5-6bbce0c9d6e0", "record_id": "flaws_cloudtrail:0000235:754318a1-c10d-417f-bea5-6bbce0c9d6e0", "row_index": 235, "timestamp": "2017-05-26T22:45:45Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "754318a1-c10d-417f-bea5-6bbce0c9d6e0", "eventTime": "2017-05-26T22:45:45Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIATY59NTJU7TBL3RUK", "expiration": "May 26, 2017 11:45:45 PM", "sessionToken": "FQoDYXdzECAaDHza4Qx6NnfhWYdm/iLMAQgmp3lzSKUq3NhTctCGwvddkRsaj4X0N++7fnvN/R/xOktNd45DxzhfrPBMQ7VaymATRwU2VabUqytyG6Ee/CiPAeQ3soRaH1DFzfVzMiFMojeZecjcbih1Piy5G//I7xQDOD/Ofk/4/+NVVx1PLCkr65+PMKvN46cXNaxgxgQso9MoxuCcJSBqda9QwJsFMuFG6Q8O336q+K2vDENnQ/148N/V2tMyVewxKLNOpTXa/hjd7qc7t1J4L17su5hd7mZeEpJ5AFopwOWkMiiZ4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79c38b32-de53-417d-bcd6-ccadb08c0538", "record_id": "flaws_cloudtrail:0000236:79c38b32-de53-417d-bcd6-ccadb08c0538", "row_index": 236, "timestamp": "2017-05-26T22:45:45Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA4U7C9HD86ULUE12U", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 972, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79c38b32-de53-417d-bcd6-ccadb08c0538", "eventTime": "2017-05-26T22:45:45Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA4U7C9HD86ULUE12U", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:44Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e5300f5-63cd-4d32-9fa4-a44e9fc0a7c1", "record_id": "flaws_cloudtrail:0000237:1e5300f5-63cd-4d32-9fa4-a44e9fc0a7c1", "row_index": 237, "timestamp": "2017-05-26T22:45:45Z", "event_type": "DescribeInternetGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA4U7C9HD86ULUE12U", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1002, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e5300f5-63cd-4d32-9fa4-a44e9fc0a7c1", "eventTime": "2017-05-26T22:45:45Z", "eventName": "DescribeInternetGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA4U7C9HD86ULUE12U", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:44Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"internetGatewayIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b6de582-da7e-4692-969b-2082c72edd3f", "record_id": "flaws_cloudtrail:0000238:8b6de582-da7e-4692-969b-2082c72edd3f", "row_index": 238, "timestamp": "2017-05-26T22:45:45Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA4U7C9HD86ULUE12U", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 991, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b6de582-da7e-4692-969b-2082c72edd3f", "eventTime": "2017-05-26T22:45:45Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA4U7C9HD86ULUE12U", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:44Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1f2b7fc-9e63-4506-beb5-e621b583b1df", "record_id": "flaws_cloudtrail:0000239:c1f2b7fc-9e63-4506-beb5-e621b583b1df", "row_index": 239, "timestamp": "2017-05-26T22:45:46Z", "event_type": "DescribeInternetGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIATY59NTJU7TBL3RUK", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1000, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1f2b7fc-9e63-4506-beb5-e621b583b1df", "eventTime": "2017-05-26T22:45:46Z", "eventName": "DescribeInternetGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIATY59NTJU7TBL3RUK", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:45Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"internetGatewayIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79c5e0bb-0641-4a77-a8e3-b5e5c84d5085", "record_id": "flaws_cloudtrail:0000240:79c5e0bb-0641-4a77-a8e3-b5e5c84d5085", "row_index": 240, "timestamp": "2017-05-26T22:45:46Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIATY59NTJU7TBL3RUK", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 991, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79c5e0bb-0641-4a77-a8e3-b5e5c84d5085", "eventTime": "2017-05-26T22:45:46Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIATY59NTJU7TBL3RUK", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:45Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d9cbe33-e213-4f08-b76a-a540f0c55e60", "record_id": "flaws_cloudtrail:0000241:4d9cbe33-e213-4f08-b76a-a540f0c55e60", "row_index": 241, "timestamp": "2017-05-26T22:45:46Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d9cbe33-e213-4f08-b76a-a540f0c55e60", "eventTime": "2017-05-26T22:45:46Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA0CK9P6CVP9WZN2ZS", "expiration": "May 26, 2017 11:45:46 PM", "sessionToken": "FQoDYXdzECAaDAVJovv/9AlicPcB6iLMAbc/UJdaguxF5/wMhzMMgr5wSptHekCNkPC/kAufl66tD5klFDgSxsh6ImSVqu1E6y+1JhpXZHL5iE4pL8NxzYKq6XcDxAVyiPvLmJvqdkytpdG3l1m9row+wHJn5btvdRNXy5fPplTq5hHiWIqCo7XqsyCztnFWcEf8PxM3WwvXeBnM3fnUWScni4oQcOruNGnABy/X6biw0Fv2b37AXGZob4rPVIfF91AwV0ICDg3d94t7J5/L0VfIj86NiFSosINwJNE0SU42sFf8Syia4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d054cb5b-55aa-4b96-be22-a3a99db9f3c7", "record_id": "flaws_cloudtrail:0000242:d054cb5b-55aa-4b96-be22-a3a99db9f3c7", "row_index": 242, "timestamp": "2017-05-26T22:45:47Z", "event_type": "DescribeInternetGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA0CK9P6CVP9WZN2ZS", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1007, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d054cb5b-55aa-4b96-be22-a3a99db9f3c7", "eventTime": "2017-05-26T22:45:47Z", "eventName": "DescribeInternetGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA0CK9P6CVP9WZN2ZS", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:46Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"internetGatewayIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56eb69ff-097b-48d6-af61-2df8ffe64b42", "record_id": "flaws_cloudtrail:0000243:56eb69ff-097b-48d6-af61-2df8ffe64b42", "row_index": 243, "timestamp": "2017-05-26T22:45:47Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA0CK9P6CVP9WZN2ZS", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56eb69ff-097b-48d6-af61-2df8ffe64b42", "eventTime": "2017-05-26T22:45:47Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA0CK9P6CVP9WZN2ZS", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:46Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e445cdd1-9bc7-4f8c-ae7d-c3d442ace359", "record_id": "flaws_cloudtrail:0000244:e445cdd1-9bc7-4f8c-ae7d-c3d442ace359", "row_index": 244, "timestamp": "2017-05-26T22:45:47Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA0CK9P6CVP9WZN2ZS", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 996, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e445cdd1-9bc7-4f8c-ae7d-c3d442ace359", "eventTime": "2017-05-26T22:45:47Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA0CK9P6CVP9WZN2ZS", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:46Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd244343-4aaf-4f04-93ee-fb084b30844f", "record_id": "flaws_cloudtrail:0000245:dd244343-4aaf-4f04-93ee-fb084b30844f", "row_index": 245, "timestamp": "2017-05-26T22:45:48Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd244343-4aaf-4f04-93ee-fb084b30844f", "eventTime": "2017-05-26T22:45:48Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAIM3KFFWRACUTJPQO", "expiration": "May 26, 2017 11:45:48 PM", "sessionToken": "FQoDYXdzECAaDGqZ9B1353ankfcmYCLMAWmZkBM97cmMo17Y8sxQ+YEb/ch/3OGVR+5kib655NwKtsMyTRoIKBdxhNvs2dkbwsjGslPB5uCQz+PdH4anPVjnG7zchrsvy0hSAEeGe51A+FefoFLlwTeVrMPahhz2WJXq68E3lsVtZmdkLyJc4FaYhTikliIlltdIEx2Mgh/71xxT4eaHj+uNGhE5VN34NptIEDjrbHFgbhU+b6pGsqOdya8wV++fIfCHPOoABldHGWV0DK+XErztXXXokNdtdtAvmZuK956wzLFgRiic4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5739a669-80bc-4407-80d8-4c64bb0e4404", "record_id": "flaws_cloudtrail:0000246:5739a669-80bc-4407-80d8-4c64bb0e4404", "row_index": 246, "timestamp": "2017-05-26T22:45:49Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAIM3KFFWRACUTJPQO", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 996, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5739a669-80bc-4407-80d8-4c64bb0e4404", "eventTime": "2017-05-26T22:45:49Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAIM3KFFWRACUTJPQO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:48Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a8a4c46-3321-42c9-b234-9deab581bf69", "record_id": "flaws_cloudtrail:0000247:2a8a4c46-3321-42c9-b234-9deab581bf69", "row_index": 247, "timestamp": "2017-05-26T22:45:49Z", "event_type": "DescribeInternetGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAIM3KFFWRACUTJPQO", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1007, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a8a4c46-3321-42c9-b234-9deab581bf69", "eventTime": "2017-05-26T22:45:49Z", "eventName": "DescribeInternetGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAIM3KFFWRACUTJPQO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:48Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"internetGatewayIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3758b20d-1cdf-4499-aad8-9ae1831bd5a8", "record_id": "flaws_cloudtrail:0000248:3758b20d-1cdf-4499-aad8-9ae1831bd5a8", "row_index": 248, "timestamp": "2017-05-26T22:45:49Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAIM3KFFWRACUTJPQO", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3758b20d-1cdf-4499-aad8-9ae1831bd5a8", "eventTime": "2017-05-26T22:45:49Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAIM3KFFWRACUTJPQO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:48Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "873156e6-881e-4f82-b012-834e422082b9", "record_id": "flaws_cloudtrail:0000249:873156e6-881e-4f82-b012-834e422082b9", "row_index": 249, "timestamp": "2017-05-26T22:45:50Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA0KK1RCGZ20YH9K9O", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "873156e6-881e-4f82-b012-834e422082b9", "eventTime": "2017-05-26T22:45:50Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA0KK1RCGZ20YH9K9O", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:50Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8aca207-86d5-435a-89be-9a276e8b7b99", "record_id": "flaws_cloudtrail:0000250:a8aca207-86d5-435a-89be-9a276e8b7b99", "row_index": 250, "timestamp": "2017-05-26T22:45:50Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8aca207-86d5-435a-89be-9a276e8b7b99", "eventTime": "2017-05-26T22:45:50Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA0KK1RCGZ20YH9K9O", "expiration": "May 26, 2017 11:45:50 PM", "sessionToken": "FQoDYXdzECAaDIXIaTjfyc+g+flRaiLMAQ0npYimen6o7nMGaZHEGTQuE9dMP/xN+LxR1mdcB8NrrWGoQhXA4OVXaO9M774wFy5jRcG6XRR/va62HUacercjQzmVtivjDowkRSZ4xL8P2Cfu0qIr66Qrfl+BRJjTEIekfjkbnT3K3MznWkKeiW/WSUWGyrs5Fb6U82xVKr1Wg4iJ7vUdbGejlsug8+QCk0xK2U/nhSEZ289ul3lMqLyBvdk3Vzt0atimokhz+CxOU/3UPAEfhPQ4r2NZS45xBGdkxn8UjkBu92IRiiie4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58ee0c68-bb9b-45f3-8a15-df8343d11315", "record_id": "flaws_cloudtrail:0000251:58ee0c68-bb9b-45f3-8a15-df8343d11315", "row_index": 251, "timestamp": "2017-05-26T22:45:51Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA0KK1RCGZ20YH9K9O", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 991, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58ee0c68-bb9b-45f3-8a15-df8343d11315", "eventTime": "2017-05-26T22:45:51Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA0KK1RCGZ20YH9K9O", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:50Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54675bb-4d27-4b13-9c8e-c376a925b9bf", "record_id": "flaws_cloudtrail:0000252:54675bb-4d27-4b13-9c8e-c376a925b9bf", "row_index": 252, "timestamp": "2017-05-26T22:45:51Z", "event_type": "DescribeInternetGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA0KK1RCGZ20YH9K9O", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1001, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54675bb-4d27-4b13-9c8e-c376a925b9bf", "eventTime": "2017-05-26T22:45:51Z", "eventName": "DescribeInternetGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA0KK1RCGZ20YH9K9O", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:50Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"internetGatewayIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80e57f5d-ee42-4d31-8b2d-82545b4bc303", "record_id": "flaws_cloudtrail:0000253:80e57f5d-ee42-4d31-8b2d-82545b4bc303", "row_index": 253, "timestamp": "2017-05-26T22:45:51Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80e57f5d-ee42-4d31-8b2d-82545b4bc303", "eventTime": "2017-05-26T22:45:51Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA73Y2DUCARMI18C1G", "expiration": "May 26, 2017 11:45:51 PM", "sessionToken": "FQoDYXdzECAaDLKBWIg50YCbiN7k7CLMAUdpEsBZAy0J4CMK0bl3R6EzwEenNOL88L+t5SZOBD+bOEDgNk8EMcDuxeJYhOtm4r2xEhiyMYbuKlzOEmvcM5IHwqqxBU1T3Gt5Tx6KpDm5rm1q2qIU0QwJZF2ZlPmc5xo4xj26I4vF7xbW5ADw+tvdJ9EKFFHXPQ+bkAmOElqyaocgj9OxK48arRSp/NhsQuWDEC4lP6YCKyfo2EnNM32IVTJfmsKUYK56MsS8gTCq2JM3aNG0ZEvTS0W3w/cKuLj4vizoKMfl7VEZhSif4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49ce2915-1dfe-40a4-8594-2ac9a06a6437", "record_id": "flaws_cloudtrail:0000254:49ce2915-1dfe-40a4-8594-2ac9a06a6437", "row_index": 254, "timestamp": "2017-05-26T22:45:52Z", "event_type": "DescribeInternetGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA73Y2DUCARMI18C1G", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1007, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49ce2915-1dfe-40a4-8594-2ac9a06a6437", "eventTime": "2017-05-26T22:45:52Z", "eventName": "DescribeInternetGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA73Y2DUCARMI18C1G", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:51Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"internetGatewayIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f220fd9d-9f0a-46b2-8b4f-3ab3143e47ae", "record_id": "flaws_cloudtrail:0000255:f220fd9d-9f0a-46b2-8b4f-3ab3143e47ae", "row_index": 255, "timestamp": "2017-05-26T22:45:52Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA73Y2DUCARMI18C1G", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 994, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f220fd9d-9f0a-46b2-8b4f-3ab3143e47ae", "eventTime": "2017-05-26T22:45:52Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA73Y2DUCARMI18C1G", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:51Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "506c3cf6-cdb8-410c-8303-0945b574638df", "record_id": "flaws_cloudtrail:0000256:506c3cf6-cdb8-410c-8303-0945b574638df", "row_index": 256, "timestamp": "2017-05-26T22:45:52Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA73Y2DUCARMI18C1G", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 982, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "506c3cf6-cdb8-410c-8303-0945b574638df", "eventTime": "2017-05-26T22:45:52Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA73Y2DUCARMI18C1G", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:51Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a5a7bab-9bdf-49c2-8219-62aacf6876ff", "record_id": "flaws_cloudtrail:0000257:4a5a7bab-9bdf-49c2-8219-62aacf6876ff", "row_index": 257, "timestamp": "2017-05-26T22:45:53Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a5a7bab-9bdf-49c2-8219-62aacf6876ff", "eventTime": "2017-05-26T22:45:53Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAIVJ62NAIFI0YEG4G", "expiration": "May 26, 2017 11:45:53 PM", "sessionToken": "FQoDYXdzECAaDPsAL/i5WEcN0hBiNiLMAR3SplaXhFowzK9cRY75iD1Jq+rKN7Lr9tcGQmSsflvm/MCGgxyCAiRRnVu6aCdGv6hvRYOei5o4JE0kfBGxdvxpMBC/O+Q4RCGEU+aCF5mrT8Qea0f0dP40IDwlS+xntNw6fApaai73kRwL7Y0Mneu964shzEKHFtj2enpxZfL1PoCwNt4lD3Xk4czYRV6IOr++EwPp31uFACfw/P3ZZqCiQbJ7pNTFujj/pxC/rtHEvewQ4g3MM82KP9bAHR8K2chwLIBMzzXpzQ4tTCih4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d17dc6b4-f039-4a0d-9e3d-40f008fb1815", "record_id": "flaws_cloudtrail:0000258:d17dc6b4-f039-4a0d-9e3d-40f008fb1815", "row_index": 258, "timestamp": "2017-05-26T22:45:53Z", "event_type": "DescribeInternetGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAIVJ62NAIFI0YEG4G", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 999, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d17dc6b4-f039-4a0d-9e3d-40f008fb1815", "eventTime": "2017-05-26T22:45:53Z", "eventName": "DescribeInternetGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAIVJ62NAIFI0YEG4G", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"internetGatewayIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ceca5ec2-5cd3-49d6-a66b-49fa66c8ee6f", "record_id": "flaws_cloudtrail:0000259:ceca5ec2-5cd3-49d6-a66b-49fa66c8ee6f", "row_index": 259, "timestamp": "2017-05-26T22:45:53Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAIVJ62NAIFI0YEG4G", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ceca5ec2-5cd3-49d6-a66b-49fa66c8ee6f", "eventTime": "2017-05-26T22:45:53Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAIVJ62NAIFI0YEG4G", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32641-eee8-474a-889b-cedfee105d1b", "record_id": "flaws_cloudtrail:0000260:32641-eee8-474a-889b-cedfee105d1b", "row_index": 260, "timestamp": "2017-05-26T22:45:53Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAIVJ62NAIFI0YEG4G", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 988, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32641-eee8-474a-889b-cedfee105d1b", "eventTime": "2017-05-26T22:45:53Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAIVJ62NAIFI0YEG4G", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21a475929-d3e3-4a6b-a776-658617c12e489", "record_id": "flaws_cloudtrail:0000261:21a475929-d3e3-4a6b-a776-658617c12e489", "row_index": 261, "timestamp": "2017-05-26T22:45:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1456, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21a475929-d3e3-4a6b-a776-658617c12e489", "eventTime": "2017-05-26T22:45:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA0EN4Q5CE69SR9C40", "expiration": "May 26, 2017 11:45:54 PM", "sessionToken": "FQoDYXdzECAaDJ1VxBmbRMbVDe2GfCLMAeBwYRu3IoSEeOf2akNGvQiHLI9B87cOAPtWLhtFgMOJTl1Fq6ArJRLRD5D/MAQVhWDtvb6Wa6GzvTbrllDwCIrYAQeFAEsPX1uAig+kmrwyZwAejy/8hRjxukftOrCmf1IhdI1Lv2mvtCm48E6kNxBGa1o9JK33vGovp8SaPAMtsBsS7rIBpWlo2DA8fJLGT+OkoylwuOZNkr8rERj8cePqVaFvoRWTdlWfE+TasaISdLxc61ld88gXrnhuntDTdf/Bja80T9xGd3rTASii4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c595007-bf05-4b9a-b192-238295ce55f", "record_id": "flaws_cloudtrail:0000262:0c595007-bf05-4b9a-b192-238295ce55f", "row_index": 262, "timestamp": "2017-05-26T22:45:55Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA0EN4Q5CE69SR9C40", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 995, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c595007-bf05-4b9a-b192-238295ce55f", "eventTime": "2017-05-26T22:45:55Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA0EN4Q5CE69SR9C40", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:54Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe1d559a-69db-4538-b590-ecd5ceef6306", "record_id": "flaws_cloudtrail:0000263:fe1d559a-69db-4538-b590-ecd5ceef6306", "row_index": 263, "timestamp": "2017-05-26T22:45:55Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA0EN4Q5CE69SR9C40", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe1d559a-69db-4538-b590-ecd5ceef6306", "eventTime": "2017-05-26T22:45:55Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA0EN4Q5CE69SR9C40", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:54Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "654bb507-1159-41e4-b673-144172e333e18", "record_id": "flaws_cloudtrail:0000264:654bb507-1159-41e4-b673-144172e333e18", "row_index": 264, "timestamp": "2017-05-26T22:45:55Z", "event_type": "DescribeInternetGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA0EN4Q5CE69SR9C40", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "654bb507-1159-41e4-b673-144172e333e18", "eventTime": "2017-05-26T22:45:55Z", "eventName": "DescribeInternetGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA0EN4Q5CE69SR9C40", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:54Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"internetGatewayIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "660585-9197-4925-94de-6c83cfb814b1", "record_id": "flaws_cloudtrail:0000265:660585-9197-4925-94de-6c83cfb814b1", "row_index": 265, "timestamp": "2017-05-26T22:45:55Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "660585-9197-4925-94de-6c83cfb814b1", "eventTime": "2017-05-26T22:45:55Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA00K6M7QLS0ANB7RO", "expiration": "May 26, 2017 11:45:55 PM", "sessionToken": "FQoDYXdzECAaDMzUavzWm7awgC26piLMAcFuXK2iu6R3L8BDeq/CxB7qvL2V8e8kgsm0wZ43zOF437x/wqzIaB2Wd8jdk0ZlJt7FEYeWkKgMohWmWf10P74++30JPsiX9sL14CP41+Tjbp5KDE4M4dnhgK3dQKwakEZecmweWU4nhHeTFcE3Kt/UNXW9percPwejmgXQk10+7bm9cicEax+BFG5wIBwCkMYZQWJN/PVafrlfwywGZs7H5lFu511fvXu+OcbhaShTDlisC4Gk8sCE28mVpbxcT8Ue1wPjw70ujqL9eiij4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e555bc2a-c08a-4a42-8096-db7c3268fbbe", "record_id": "flaws_cloudtrail:0000266:e555bc2a-c08a-4a42-8096-db7c3268fbbe", "row_index": 266, "timestamp": "2017-05-26T22:45:56Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA00K6M7QLS0ANB7RO", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e555bc2a-c08a-4a42-8096-db7c3268fbbe", "eventTime": "2017-05-26T22:45:56Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA00K6M7QLS0ANB7RO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:55Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b033442da-c594-479e-8874-116b693dfb5c", "record_id": "flaws_cloudtrail:0000267:b033442da-c594-479e-8874-116b693dfb5c", "row_index": 267, "timestamp": "2017-05-26T22:45:56Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA00K6M7QLS0ANB7RO", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 996, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b033442da-c594-479e-8874-116b693dfb5c", "eventTime": "2017-05-26T22:45:56Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA00K6M7QLS0ANB7RO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:55Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e7ed35c-269e-4c62-93ed-3a7608ddfa99", "record_id": "flaws_cloudtrail:0000268:7e7ed35c-269e-4c62-93ed-3a7608ddfa99", "row_index": 268, "timestamp": "2017-05-26T22:45:56Z", "event_type": "DescribeInternetGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA00K6M7QLS0ANB7RO", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1006, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e7ed35c-269e-4c62-93ed-3a7608ddfa99", "eventTime": "2017-05-26T22:45:56Z", "eventName": "DescribeInternetGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA00K6M7QLS0ANB7RO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:55Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"internetGatewayIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "faef9001-9514-4d90-ae3a-a069c2d08089", "record_id": "flaws_cloudtrail:0000269:faef9001-9514-4d90-ae3a-a069c2d08089", "row_index": 269, "timestamp": "2017-05-26T22:45:56Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "faef9001-9514-4d90-ae3a-a069c2d08089", "eventTime": "2017-05-26T22:45:56Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAM9O7RUFUV9TNGQ01", "expiration": "May 26, 2017 11:45:56 PM", "sessionToken": "FQoDYXdzECAaDGzQKE1PzaXtbXBRpyLMAbqu4LdcDGB2zBNZnGGiQTmxPsp8oF87VQedyPN01M84Qxm5MUZFQp4tDfJ4hNYAbfPNHnsGG4lJrtSeFG/O3O4l5EkEuoK7tNx/utnap/gHZjWvl5pbTKItT5SLkGzipwW2qZ/Jt6b+B2vQRhoK5Fyhel3ssuk3vK5lDfbcT7jlpiFjpuepDdUCZyKhdNtTTkRmfRcq1UjlYVeFOirpySnvVLpjuWMf0XlHk8aDZOpneg2iQ/9ncwZgLG8PrHJvAz6Powu5o8UrkeGEWyik4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03cf20be-70b5-4a61-8713-3012c7affb0e", "record_id": "flaws_cloudtrail:0000270:03cf20be-70b5-4a61-8713-3012c7affb0e", "row_index": 270, "timestamp": "2017-05-26T22:45:58Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03cf20be-70b5-4a61-8713-3012c7affb0e", "eventTime": "2017-05-26T22:45:58Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIALWUHXCHN29HM1MJ1", "expiration": "May 26, 2017 11:45:58 PM", "sessionToken": "FQoDYXdzECAaDHCsFry7axEwLpu2MyLMAatkD2QOC5CbSvHuDo3de5vH7zEneVsdv9lKtIKHZfmLNyzRN9X8Ileoc3KU/qxjxc/5P+3Olg1GJ9wOUfpHHY8m8PBR2lv/CD8SFhJzz6mxrsEtt2QavRGwNAiAu19VYarQ+TCavEIeUuol83Sa3k20pKRnSNkedh473PuBR6mSGq1MCRFkHJApq6Oein7Ieu6ylUtmePPAYkSZ4nglyhrOz3ztC/z0fCjoJDthTi3TG+C7VTGC1L5NqLScHYYAKVZi11OCfKn5WovhfSim4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a31e6b3-a59c-4973-9b45-3b5d73b1a360", "record_id": "flaws_cloudtrail:0000271:3a31e6b3-a59c-4973-9b45-3b5d73b1a360", "row_index": 271, "timestamp": "2017-05-26T22:45:58Z", "event_type": "DescribeInternetGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIALWUHXCHN29HM1MJ1", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1002, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a31e6b3-a59c-4973-9b45-3b5d73b1a360", "eventTime": "2017-05-26T22:45:58Z", "eventName": "DescribeInternetGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIALWUHXCHN29HM1MJ1", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:58Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"internetGatewayIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1302b103-9bfc-4d06-af4a-12c11083a189", "record_id": "flaws_cloudtrail:0000272:1302b103-9bfc-4d06-af4a-12c11083a189", "row_index": 272, "timestamp": "2017-05-26T22:45:58Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIALWUHXCHN29HM1MJ1", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1302b103-9bfc-4d06-af4a-12c11083a189", "eventTime": "2017-05-26T22:45:58Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIALWUHXCHN29HM1MJ1", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:58Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5eba419a-79fc-4d7b-a8a2-ba8168b447e3", "record_id": "flaws_cloudtrail:0000273:5eba419a-79fc-4d7b-a8a2-ba8168b447e3", "row_index": 273, "timestamp": "2017-05-26T22:45:58Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIALWUHXCHN29HM1MJ1", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 991, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5eba419a-79fc-4d7b-a8a2-ba8168b447e3", "eventTime": "2017-05-26T22:45:58Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIALWUHXCHN29HM1MJ1", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:58Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86c9d3aa-967c-43a1-b7fa-a40b3c7a1715", "record_id": "flaws_cloudtrail:0000274:86c9d3aa-967c-43a1-b7fa-a40b3c7a1715", "row_index": 274, "timestamp": "2017-05-26T22:45:59Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86c9d3aa-967c-43a1-b7fa-a40b3c7a1715", "eventTime": "2017-05-26T22:45:59Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAMCIVOU47HA11QMWW", "expiration": "May 26, 2017 11:45:59 PM", "sessionToken": "FQoDYXdzECAaDFoqB3r05pZbPgl+riLMAcspYWMzVc0mUblv4GuwpU6uRegzDsJ2sYEZddMedKKDFYxfXrXBnPx7KXHwS8YFVh1Q8zPUArFdbY0z6X+oI93+cjOHKwxQFjlA71eqrvIYCFhD36NcUJUL3iznYJkPkOHVtFJhW4Jez1w+IJNvOY2C38y19RY6ZYPglNvU7icsmBDqVbaw8dlye7wUSy56AjOmkuNg24NWqjxdRJersPu8YMFyKvhohbeRUM8u9Dg0WMmmidxXDa1spHZqVDIknMwLyTvdF0S6X5iNjyin4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "634a08cd-0f4f-475b-a20e-8ece5eb80c25", "record_id": "flaws_cloudtrail:0000275:634a08cd-0f4f-475b-a20e-8ece5eb80c25", "row_index": 275, "timestamp": "2017-05-26T22:45:59Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "634a08cd-0f4f-475b-a20e-8ece5eb80c25", "eventTime": "2017-05-26T22:45:59Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIACD35IDQU2QMOINR6", "expiration": "May 26, 2017 11:45:59 PM", "sessionToken": "FQoDYXdzECAaDLrsOwVVhP7CD2YpMSLMAdhLX5E9GkdPdZeOeku7LYG2O9vTn0cJq+PPs+kBA3pdR5U/Tkik7Ik0GzC1Fer1wKZVuHLm+APNsTijMzZfH7Qu0qpgnGVxsMORVPj8OXdsdok/9qYw2coULfOeq7NnopaSFg6gQs+FNm9YkzRNCtJeGIWNJqb1H2xlAH/nXmqh7gnBinrxXJLAYm6FVhE7IEJin0GT4Acp8Sh5+DfNPdVjySwjOC3HhURwQuhXuyYX46ndUSI7rjnEl0SHvXFWwnvnr6mbqunMEM9JySin4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc4fedc7-1c02-484e-9509-7ef6c6fe61d6", "record_id": "flaws_cloudtrail:0000276:cc4fedc7-1c02-484e-9509-7ef6c6fe61d6", "row_index": 276, "timestamp": "2017-05-26T22:46:01Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIACD35IDQU2QMOINR6", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc4fedc7-1c02-484e-9509-7ef6c6fe61d6", "eventTime": "2017-05-26T22:46:01Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIACD35IDQU2QMOINR6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:59Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82f0a3b8-e0d7-4a21-8c05-f8af61c06ec1", "record_id": "flaws_cloudtrail:0000277:82f0a3b8-e0d7-4a21-8c05-f8af61c06ec1", "row_index": 277, "timestamp": "2017-05-26T22:46:01Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIACD35IDQU2QMOINR6", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 992, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82f0a3b8-e0d7-4a21-8c05-f8af61c06ec1", "eventTime": "2017-05-26T22:46:01Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIACD35IDQU2QMOINR6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:59Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13fef79a-b6d8-4380-a4a3-c71ffe43c299", "record_id": "flaws_cloudtrail:0000278:13fef79a-b6d8-4380-a4a3-c71ffe43c299", "row_index": 278, "timestamp": "2017-05-26T22:46:01Z", "event_type": "DescribeInternetGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIACD35IDQU2QMOINR6", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1003, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13fef79a-b6d8-4380-a4a3-c71ffe43c299", "eventTime": "2017-05-26T22:46:01Z", "eventName": "DescribeInternetGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIACD35IDQU2QMOINR6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:45:59Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"internetGatewayIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9363ceb3-ee75-4a2d-ad9c-26edbf5d48ff", "record_id": "flaws_cloudtrail:0000279:9363ceb3-ee75-4a2d-ad9c-26edbf5d48ff", "row_index": 279, "timestamp": "2017-05-26T22:46:02Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9363ceb3-ee75-4a2d-ad9c-26edbf5d48ff", "eventTime": "2017-05-26T22:46:02Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAKZ4FWW26QE2KNNJ9", "expiration": "May 26, 2017 11:46:02 PM", "sessionToken": "FQoDYXdzECAaDO9x32eeQ1B08C8h8yLMAX+sRHNZQnL0a0WhkTF3FtrbXZY7Os3xQofPq0F0wvDcrCcL/eluTFfC5w7pAUWLws8aiT3RJyx27Wwli4lHpa5MQPhm5BxbjPBfbO7bxeEI9p2D3u5j8yu8mewAK8hmeAxJ2QBbt+Rzgp+RvCx6U/q74sCDjVMoaZ5Hatdhl4CbPb6XeMkJrAXbQA+eujW/d8KSftdcaSs1rUfCJKkH0WclUUe+fjfTfU7iUB860q4EJ8qr6+AMCk+tS/Vfu9+f6a6OaX+fbONcpEtvbCiq4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dea92c7a-3de5-447f-8e67-08ab86607c4", "record_id": "flaws_cloudtrail:0000280:dea92c7a-3de5-447f-8e67-08ab86607c4", "row_index": 280, "timestamp": "2017-05-26T22:46:03Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAKZ4FWW26QE2KNNJ9", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 993, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dea92c7a-3de5-447f-8e67-08ab86607c4", "eventTime": "2017-05-26T22:46:03Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAKZ4FWW26QE2KNNJ9", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01d755dd-ae9a-4bb9-b6a6-61bf89c3eb02", "record_id": "flaws_cloudtrail:0000281:01d755dd-ae9a-4bb9-b6a6-61bf89c3eb02", "row_index": 281, "timestamp": "2017-05-26T22:46:03Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAKZ4FWW26QE2KNNJ9", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01d755dd-ae9a-4bb9-b6a6-61bf89c3eb02", "eventTime": "2017-05-26T22:46:03Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAKZ4FWW26QE2KNNJ9", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6a54d52-d75d-40bf-94a2-ddc6d336362", "record_id": "flaws_cloudtrail:0000282:e6a54d52-d75d-40bf-94a2-ddc6d336362", "row_index": 282, "timestamp": "2017-05-26T22:46:03Z", "event_type": "DescribeInternetGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAKZ4FWW26QE2KNNJ9", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1004, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6a54d52-d75d-40bf-94a2-ddc6d336362", "eventTime": "2017-05-26T22:46:03Z", "eventName": "DescribeInternetGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAKZ4FWW26QE2KNNJ9", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"internetGatewayIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ac46f71-9e98-463b-95a7-a6c32fc89f44", "record_id": "flaws_cloudtrail:0000283:2ac46f71-9e98-463b-95a7-a6c32fc89f44", "row_index": 283, "timestamp": "2017-05-26T22:46:03Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ac46f71-9e98-463b-95a7-a6c32fc89f44", "eventTime": "2017-05-26T22:46:03Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIACWK9VO1M731GGZ4J", "expiration": "May 26, 2017 11:46:03 PM", "sessionToken": "FQoDYXdzECAaDEzagyGIyvRyP91F2CLMAekrv6jQsxqflb1WRir8aPC7QWtxnWIVbINv4Xj+ssuyTqiLfP6/lLbSjO2+3pd2M5mWMHT9MwgOwbhlhHneHd/wF+m7PHgnILfBW8wRqgLW3XBgBEwqZCU1csYBbUqRpxBMpz47FkV0NvIt6/BlXV363oUpqTkNak/bpugfs2fVnEcQp3+JgxByvMGRoJl4dfNCbBfB53ZaHG3uSb4WPPbnhcNEGoO8ohdD3vA2gv12GJOyUuGkQPxSjHnPBiK6vgGLUmYZJ1YGUeArUiir4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08f69fb5-1159-4106-a6ab-1eb7377f5cb7", "record_id": "flaws_cloudtrail:0000284:08f69fb5-1159-4106-a6ab-1eb7377f5cb7", "row_index": 284, "timestamp": "2017-05-26T22:46:04Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIACWK9VO1M731GGZ4J", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 991, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08f69fb5-1159-4106-a6ab-1eb7377f5cb7", "eventTime": "2017-05-26T22:46:04Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIACWK9VO1M731GGZ4J", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "646523-c578-4d53-9567-d67ae3c44f9e", "record_id": "flaws_cloudtrail:0000285:646523-c578-4d53-9567-d67ae3c44f9e", "row_index": 285, "timestamp": "2017-05-26T22:46:04Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIACWK9VO1M731GGZ4J", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "646523-c578-4d53-9567-d67ae3c44f9e", "eventTime": "2017-05-26T22:46:04Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIACWK9VO1M731GGZ4J", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00b323578-413e-477e-a599-5b0536c580376", "record_id": "flaws_cloudtrail:0000286:00b323578-413e-477e-a599-5b0536c580376", "row_index": 286, "timestamp": "2017-05-26T22:46:05Z", "event_type": "DescribeInternetGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIACWK9VO1M731GGZ4J", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1001, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00b323578-413e-477e-a599-5b0536c580376", "eventTime": "2017-05-26T22:46:05Z", "eventName": "DescribeInternetGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIACWK9VO1M731GGZ4J", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"internetGatewayIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f785e71-33d3-4507-94db-548eaa28eb28", "record_id": "flaws_cloudtrail:0000287:0f785e71-33d3-4507-94db-548eaa28eb28", "row_index": 287, "timestamp": "2017-05-26T22:46:05Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1455, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f785e71-33d3-4507-94db-548eaa28eb28", "eventTime": "2017-05-26T22:46:05Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAAP1XIWUNYBM3JY38", "expiration": "May 26, 2017 11:46:05 PM", "sessionToken": "FQoDYXdzECAaDOR7HfHoatgHKPGqySLMAcXx0hXNdqV9fk0BfTTgqoXQzZpTuqBil/RHw8fOE1cV09QAYYC8mdX69ZYCGIFXV+gnglyLnkMUVe0pzBjBlpLlXvayukdkmNAqQ4GKzfYthkoCGrRK0dEV2t3bKq93zlAJoxNa6hLYeKK4Uvh3sGIWRFnrVkJ03gssiaVYsFGvLNv3DXUjZiZsrgZzFGQCC7gurGGVqaWP+0fiBen6DMipeZpYJhD7ZMw0Sfm00WXJ9F19kZfEWM4R0sNTJdlcYqERki4pWlatq4J1lSit4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e8ea0a5-9bff-42f9-b0a6-32a893d4b8ab", "record_id": "flaws_cloudtrail:0000288:7e8ea0a5-9bff-42f9-b0a6-32a893d4b8ab", "row_index": 288, "timestamp": "2017-05-26T22:46:06Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAAP1XIWUNYBM3JY38", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 991, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e8ea0a5-9bff-42f9-b0a6-32a893d4b8ab", "eventTime": "2017-05-26T22:46:06Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAAP1XIWUNYBM3JY38", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b9e01aa-6168-4354-915b-51732c12bc6e", "record_id": "flaws_cloudtrail:0000289:9b9e01aa-6168-4354-915b-51732c12bc6e", "row_index": 289, "timestamp": "2017-05-26T22:46:06Z", "event_type": "DescribeInternetGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAAP1XIWUNYBM3JY38", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1002, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b9e01aa-6168-4354-915b-51732c12bc6e", "eventTime": "2017-05-26T22:46:06Z", "eventName": "DescribeInternetGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAAP1XIWUNYBM3JY38", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"internetGatewayIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d410922b-ad55-4572-a990-c44916ba59e", "record_id": "flaws_cloudtrail:0000290:d410922b-ad55-4572-a990-c44916ba59e", "row_index": 290, "timestamp": "2017-05-26T22:46:06Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAAP1XIWUNYBM3JY38", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 974, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d410922b-ad55-4572-a990-c44916ba59e", "eventTime": "2017-05-26T22:46:06Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAAP1XIWUNYBM3JY38", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e98e8307-7d43-4c8f-8a8d-0f6cc5fa7a55", "record_id": "flaws_cloudtrail:0000291:e98e8307-7d43-4c8f-8a8d-0f6cc5fa7a55", "row_index": 291, "timestamp": "2017-05-26T22:46:07Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e98e8307-7d43-4c8f-8a8d-0f6cc5fa7a55", "eventTime": "2017-05-26T22:46:07Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAGW8Y4ZLRGJXCLP15", "expiration": "May 26, 2017 11:46:07 PM", "sessionToken": "FQoDYXdzECAaDLKyqxJYnakOnJPrtyLMAapcqa+KB9xPMkGFZgf8WiU1c9sFirwGPeHwD5XjujeyE6UBUo7vsmLRNUtrIOSO7czM9I76hd0H/P4v5lqjN6WHrhgJBfqPF1FMyhwf/tH0CDqSbeDk3GP9zNgBW+RrazowvDt6iJrKcWkWjOG0QoKeAob8ZQuAXI8bwb/YS7VBrr0P8DrLX5lseiDDjfiExecjkIB+/6RaHs99Slgty/8NnZ3B3V8ca0PWr5Tkfxt5gyfbP+K7v75PdFKKz8Yt8vYT3vJvh/+qwmqIgCiv4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b3e2047-f208-4843-9677-a96c4a457dc4", "record_id": "flaws_cloudtrail:0000292:2b3e2047-f208-4843-9677-a96c4a457dc4", "row_index": 292, "timestamp": "2017-05-26T22:46:07Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAGW8Y4ZLRGJXCLP15", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1023, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b3e2047-f208-4843-9677-a96c4a457dc4", "eventTime": "2017-05-26T22:46:07Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAGW8Y4ZLRGJXCLP15", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:07Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd0f6beb-1891-4c1f-98ac-de5c06f6c63e", "record_id": "flaws_cloudtrail:0000293:bd0f6beb-1891-4c1f-98ac-de5c06f6c63e", "row_index": 293, "timestamp": "2017-05-26T22:46:08Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd0f6beb-1891-4c1f-98ac-de5c06f6c63e", "eventTime": "2017-05-26T22:46:08Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA6XSOGT2DYN5KFRX6", "expiration": "May 26, 2017 11:46:08 PM", "sessionToken": "FQoDYXdzECAaDLpQ6wZzPCEpC0r3eyLMARQfdgv2lt53M/VSBIE1x7RkoHCSgk4ExFRlXUN7CQZlSWTvoI/4e4ZYvaMKoDd87wlsLYDQwYm9vqmAKyOXg7J/xjXlgL4rpb/sNunV9pxqNxZv10U61QiD87CyyyVt/jn6MbD6oJGaaPcJ8IHUIU6w0ZFVLmTu8ePUQTgVrwNKXnJX2DA4rS6t2s3xtzhHSjfxYJKIQw7E0glKxM8gvTw1j6w+6EeInoMUlTX6R/qBawsOpeEC2eYrtQJhsxp1r7W0KRfcQ/BJiN3aWiiw4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eff75b40-2c39-49e1-ac9b-2fcd2c853006", "record_id": "flaws_cloudtrail:0000294:eff75b40-2c39-49e1-ac9b-2fcd2c853006", "row_index": 294, "timestamp": "2017-05-26T22:46:08Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eff75b40-2c39-49e1-ac9b-2fcd2c853006", "eventTime": "2017-05-26T22:46:08Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAZ2OMSA1XF9UGA4ZY", "expiration": "May 26, 2017 11:46:08 PM", "sessionToken": "FQoDYXdzECAaDNQhDhg8S+bZzcMNVSLMARAH9bxRQDb/15Xfvv0zgbLKe8NbZZvF5Fk8VYiuJVBkt0W3j1SHmi7lA8IkeB41CDdd7s3FApc5Gr8LWbSTSHNPd0lXSbSBH7hTWQOHudBrHkj+DihiuLBmCkps5XM9gQmvIjm7OxyPyHrALmjE0ReVt7KQCsPPIHFxfqOw/SyDyg0EcyOLtvl8wTkR7zv1hhLQFTDrEMbTNCvjp/6cn32A9y30GmCiyIgQNyZTcrPsVx+8+vrXOFGLTa/Te0ShR2gIcDo/yc4rWhff2yiw4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9dda6fa7-608f-47d6-8619-a185f72418b", "record_id": "flaws_cloudtrail:0000295:9dda6fa7-608f-47d6-8619-a185f72418b", "row_index": 295, "timestamp": "2017-05-26T22:46:08Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAZ2OMSA1XF9UGA4ZY", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1022, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9dda6fa7-608f-47d6-8619-a185f72418b", "eventTime": "2017-05-26T22:46:08Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAZ2OMSA1XF9UGA4ZY", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:08Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26fa9fe7-ded7-4c2f-8391-97a83ee3ddf3", "record_id": "flaws_cloudtrail:0000296:26fa9fe7-ded7-4c2f-8391-97a83ee3ddf3", "row_index": 296, "timestamp": "2017-05-26T22:46:09Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA6XSOGT2DYN5KFRX6", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26fa9fe7-ded7-4c2f-8391-97a83ee3ddf3", "eventTime": "2017-05-26T22:46:09Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA6XSOGT2DYN5KFRX6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:08Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb9da5fd-cfdd-4649-b0e8-30be759d776d", "record_id": "flaws_cloudtrail:0000297:cb9da5fd-cfdd-4649-b0e8-30be759d776d", "row_index": 297, "timestamp": "2017-05-26T22:46:10Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb9da5fd-cfdd-4649-b0e8-30be759d776d", "eventTime": "2017-05-26T22:46:10Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIATB91HUO4C7XYN8PV", "expiration": "May 26, 2017 11:46:10 PM", "sessionToken": "FQoDYXdzECAaDL5gSElIdP2BTJH35yLMAbQt+bJZMtMslCWpAXiRG9sSKOmdlTwnjYmlFdEytRL/zBLHGKsGC29KvhIaone+k0LvE/PDVaSADlKQ7k446JXNDy918KsLOc1KDnJr3d8Zs6aQBTpnEfXMKzIWdNCP8ViOhUHWmpVCWcTj+VCWtDZaN30C6lbqh/RZWgzxuNKTj7NbM0rhqCprGZH39BkuhY7AvuESp2TZZGRFnh3ZPjsqLkP1p12c/1ka0oBF+rEbGf5JpqWSs9Yg7OtR7iy7OLn1L8l4qc0y3jUUjyiy4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e2893f6-e608-42bd-9548-1628fa295b17", "record_id": "flaws_cloudtrail:0000298:5e2893f6-e608-42bd-9548-1628fa295b17", "row_index": 298, "timestamp": "2017-05-26T22:46:11Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIATB91HUO4C7XYN8PV", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e2893f6-e608-42bd-9548-1628fa295b17", "eventTime": "2017-05-26T22:46:11Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIATB91HUO4C7XYN8PV", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:10Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a2cc0fe-ae65-4b7e-91a6-7f1bcdddf995", "record_id": "flaws_cloudtrail:0000299:1a2cc0fe-ae65-4b7e-91a6-7f1bcdddf995", "row_index": 299, "timestamp": "2017-05-26T22:46:12Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA30FKIDB1JLGJCYZO", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1023, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a2cc0fe-ae65-4b7e-91a6-7f1bcdddf995", "eventTime": "2017-05-26T22:46:12Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA30FKIDB1JLGJCYZO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:12Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ccf0a0a-0da3-41c3-a8c3-db41cfeaeb2f", "record_id": "flaws_cloudtrail:0000300:8ccf0a0a-0da3-41c3-a8c3-db41cfeaeb2f", "row_index": 300, "timestamp": "2017-05-26T22:46:12Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ccf0a0a-0da3-41c3-a8c3-db41cfeaeb2f", "eventTime": "2017-05-26T22:46:12Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA30FKIDB1JLGJCYZO", "expiration": "May 26, 2017 11:46:12 PM", "sessionToken": "FQoDYXdzECAaDOvdhbPozpUT7IfaXSLMAY/H4pC8neFoQWL5t/rpyqZ4xP/5Uyq42bHukUwjkpbgCOsLqTVZbxQYIvSsr1+LeuQZ+Aenn61QSkDUCZ3sFNYeBInweiEqZ9GfjEqa16hyGmc7LH1NmRd2AV6Rzg1GZpTlrDxneEqW+/DUQ7mL75eAGr2UCFkIpP0YfEmS3dqeXh++VcsA4gX6o630Sj3D2ZaS60aqbQrBKw7injci83xxiE6SrP0h4A+oljVXLzx1EAs6Kp4p+sER/hW00X0G8ivvekUopAQ4B3lZwSi04KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d7defc7-9a88-4325-b4e7-51b4b236d8b8", "record_id": "flaws_cloudtrail:0000301:0d7defc7-9a88-4325-b4e7-51b4b236d8b8", "row_index": 301, "timestamp": "2017-05-26T22:46:13Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1455, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d7defc7-9a88-4325-b4e7-51b4b236d8b8", "eventTime": "2017-05-26T22:46:13Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAIN9YQ5WXY4C7TWH6", "expiration": "May 26, 2017 11:46:13 PM", "sessionToken": "FQoDYXdzECAaDJvCDYKGSi9wETo4iSLMAfXTQ04TRaLb5ORMMi6tcsm99DcEhYDlefKzQ7UED8sgP4UhsAu7D0VA0bcmJCEdoMRwdqUIhCjXFcRfYUomLGHSOr2OZgqDt8AEuD8Sm7fyZHSdRur4kgqYGkN40HTQWrAYOqnrQiTCwtG9c4d+WIayAKZZeKI6+YoiWmizT5/ZYahYC84gx1mmTEpbM2j/cks6P1dGBUo4IYtK9srd/6bxRYpt5nHIUOgxcra/NdEHu7KziULUS1zcUXWuKnF0JInyaEmP0SlfqOJLyyi14KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44d95c53-a64c-423a-a8f1-cfef2c4cbf0b", "record_id": "flaws_cloudtrail:0000302:44d95c53-a64c-423a-a8f1-cfef2c4cbf0b", "row_index": 302, "timestamp": "2017-05-26T22:46:14Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAIN9YQ5WXY4C7TWH6", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44d95c53-a64c-423a-a8f1-cfef2c4cbf0b", "eventTime": "2017-05-26T22:46:14Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAIN9YQ5WXY4C7TWH6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:13Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fcf0e5b9-8513-485f-a5ee-5222be325bd4", "record_id": "flaws_cloudtrail:0000303:fcf0e5b9-8513-485f-a5ee-5222be325bd4", "row_index": 303, "timestamp": "2017-05-26T22:46:14Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fcf0e5b9-8513-485f-a5ee-5222be325bd4", "eventTime": "2017-05-26T22:46:14Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAZZD0PW3585VTYKBS", "expiration": "May 26, 2017 11:46:14 PM", "sessionToken": "FQoDYXdzECAaDKAJBQITaRdIZhUcJyLMAeZ7OFn5LiUJ8j3FmNSFDB+bJsWrfxJXYoycBuTrNMU2WCqo0HK0a/bxg2IFWvupf5mwQ9rQ82YmrjacOSVrjLGOTeq6u/3tdtj9nB7dbZtinz2n7mXQ6zrufeBz7kLzhWXCLBkVUrg8WNvspGCFyzZTYbn+1EXx2CJ8U6jcDD4WgHArNR/vUJpKW1TsRoWTP0Yitvwl9bAr5XfxsWVtqRL4O2coAfXZx+Fpun9ndjgHEa6RlFKc/sE40Ywuyrfm0ctLkmhw6LwLVtxWjSi24KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3cf677ec-face-43ee-9797-de0f605955aa1", "record_id": "flaws_cloudtrail:0000304:3cf677ec-face-43ee-9797-de0f605955aa1", "row_index": 304, "timestamp": "2017-05-26T22:46:15Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3cf677ec-face-43ee-9797-de0f605955aa1", "eventTime": "2017-05-26T22:46:15Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIACVQPIGBPGY1VM44S", "expiration": "May 26, 2017 11:46:15 PM", "sessionToken": "FQoDYXdzECAaDAwTr+MqItNPZFYADyLMAXm8aHtQw2aYOJMEqqAX6mLJRvzr9ZVvF0vgGVeHRz9WYfsoczMCOvMkp+45YxrFMz5t/OiHfU3GTy6Nj45tKIh+X4T19XscrBAlGYBAzXhMBHGsmnK3E3dVn6WZ68tCTLKquqgF6v1L7prPXyOfb9t7RQpm8hV/JJ0DrTFEm7NlxWAX1KR14pnAUYG50ocwYtElVX9Pl2PjGWegz+Ye+fnSmBBPmGuXBko28rErhnLJNova7Vza9OjhNG3BSOjiXEv4OGGgcNtXdvMWeCi34KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d537c93-915d-4832-bc27-743bef48f018", "record_id": "flaws_cloudtrail:0000305:9d537c93-915d-4832-bc27-743bef48f018", "row_index": 305, "timestamp": "2017-05-26T22:46:15Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAZZD0PW3585VTYKBS", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1023, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d537c93-915d-4832-bc27-743bef48f018", "eventTime": "2017-05-26T22:46:15Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAZZD0PW3585VTYKBS", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:14Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e9d816c-bc7f-4581-9b5a-69d673c30010", "record_id": "flaws_cloudtrail:0000306:8e9d816c-bc7f-4581-9b5a-69d673c30010", "row_index": 306, "timestamp": "2017-05-26T22:46:16Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIACVQPIGBPGY1VM44S", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e9d816c-bc7f-4581-9b5a-69d673c30010", "eventTime": "2017-05-26T22:46:16Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIACVQPIGBPGY1VM44S", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:15Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2c493bd-e462-4359-95e0-56a20cef9c64", "record_id": "flaws_cloudtrail:0000307:f2c493bd-e462-4359-95e0-56a20cef9c64", "row_index": 307, "timestamp": "2017-05-26T22:46:17Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAWRQV8NJH1PO2GJQN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1026, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2c493bd-e462-4359-95e0-56a20cef9c64", "eventTime": "2017-05-26T22:46:17Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAWRQV8NJH1PO2GJQN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:17Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f205963-4cb2-4d00-9f86-c888f84258", "record_id": "flaws_cloudtrail:0000308:f205963-4cb2-4d00-9f86-c888f84258", "row_index": 308, "timestamp": "2017-05-26T22:46:17Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1449, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f205963-4cb2-4d00-9f86-c888f84258", "eventTime": "2017-05-26T22:46:17Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAWRQV8NJH1PO2GJQN", "expiration": "May 26, 2017 11:46:17 PM", "sessionToken": "FQoDYXdzECAaDOaJKUF5nuGyY8WwSCLMAVxxCmzeuOzveI6C5sfDyY6sfKfRspuxExn0UjCkDjLmYa1lmzc6jT+PfI5nInXSD29o0eOMTXG6aoFTwBvUFTmby1fVIDpmDjwzOwzBVY3VlhvChvjYIvWNrpJE0MqR7Yvx74ZKqfuYpiIUHRV65e/CaD1LrW6gGFolDZoX6uQu9u1oV7LIdTU1MbySJw8viP5U65G2FnQW4ulWtR7m9Mqldh2pGi/x0jKxP7Csw3Gf2mLZYMIo9wRpBZbV7WxK2WDotOODrX3psRs9QCi54KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e927d73-3141-4bb3-930b-3fd1f9d189e0", "record_id": "flaws_cloudtrail:0000309:2e927d73-3141-4bb3-930b-3fd1f9d189e0", "row_index": 309, "timestamp": "2017-05-26T22:46:18Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1455, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e927d73-3141-4bb3-930b-3fd1f9d189e0", "eventTime": "2017-05-26T22:46:18Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIADRNA7AG43DK79RON", "expiration": "May 26, 2017 11:46:18 PM", "sessionToken": "FQoDYXdzECAaDLCN6uf7A4uJop+gWCLMAXZeiCbaljYguwDr0HE/uQ172SgEDw+ykHu9dPFAbUluYYAJWHFV/liWoTeWw9yA6W+yTTNmbNgRGxyTNLXNOD1lom9w9cKl8w/ePKs08o1VZX09UsXYj9F2BxWvgfVUfAL8pIWSaorJ4HoRv4bvTkw9HY0yB9LzQ5mWVLq7f0I0pqqh8hz3NgeAAKfsfS1H8gQ/Looday3V+wAgk8/guR/SdGknvwsmB5Ayda+xBBAh4/krUqHZoWisjiDGwx/0gjut1YLjpsw9ClozAii64KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a23ad495-094f-4e2c-b499-ddd725926d55c", "record_id": "flaws_cloudtrail:0000310:a23ad495-094f-4e2c-b499-ddd725926d55c", "row_index": 310, "timestamp": "2017-05-26T22:46:19Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1455, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a23ad495-094f-4e2c-b499-ddd725926d55c", "eventTime": "2017-05-26T22:46:19Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAAYHLIXERDR24OJK2", "expiration": "May 26, 2017 11:46:19 PM", "sessionToken": "FQoDYXdzECAaDIi7hyiMOLmb7Fcw7iLMAQMM0eXCHIcu81hOZ0x82/k0pnrzNciSLCrlGIA7rF0rr+/mljxB4fM5Q1qWPfkO4aHKm5HQbo+aKSLqnP4J7DIdfB51mRvNxcBMYVbgIozKD0aa2IyZohdCUm11wQvb+1o+VCQL8hgUSnjXDL95uXZmJqJKPPaJUz9md74sweihDyv9rg8xbKHMyBYsqRJArZNvPzgPFcTZ7rWw5xNW6qfSJ/juBjO0l2HxcQaseOUtdASU+EKerreQxOIvBkpkioQJf/Zt4MSDEgFxKCi74KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f873f8e9-93cd-44d5-8d3f-ec8d1076c703", "record_id": "flaws_cloudtrail:0000311:f873f8e9-93cd-44d5-8d3f-ec8d1076c703", "row_index": 311, "timestamp": "2017-05-26T22:46:20Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1455, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f873f8e9-93cd-44d5-8d3f-ec8d1076c703", "eventTime": "2017-05-26T22:46:20Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIATF6LT3QX220FGWYX", "expiration": "May 26, 2017 11:46:20 PM", "sessionToken": "FQoDYXdzECAaDPhAryyQEsfIbYTspiLMAUIxxAFWoo5S35ycnu7pNlJsOvaZVc3kgeHeU8cKG/yZCX8yr85V9MGrXzigP/Y3pHj56M3IV6HIspYvA07c+pJrDdP2AYAueQJ8+kWOWTp1XV3NmabGR5baXdnsJc7RonDea7oF8lH8NVmeAW+j83GbxiF8Swt13sLOT1B/RabcB/Cr0ryVBb+aXfN1pQIO350Yb0bvOWjgyKzb8Oi5dt5Qglsi2PVZfAhnFEswzAZj+dF30MUpKUQBSbCapmXzRuj9Zi+Bsepv0pcDbSi84KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27c329c3-45ab-43d0-82bb-9f2661dcd329", "record_id": "flaws_cloudtrail:0000312:27c329c3-45ab-43d0-82bb-9f2661dcd329", "row_index": 312, "timestamp": "2017-05-26T22:46:20Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAAYHLIXERDR24OJK2", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1023, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27c329c3-45ab-43d0-82bb-9f2661dcd329", "eventTime": "2017-05-26T22:46:20Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAAYHLIXERDR24OJK2", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94aff4b6-fcd7-43cd-a61c-5f8f3832a196", "record_id": "flaws_cloudtrail:0000313:94aff4b6-fcd7-43cd-a61c-5f8f3832a196", "row_index": 313, "timestamp": "2017-05-26T22:46:21Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94aff4b6-fcd7-43cd-a61c-5f8f3832a196", "eventTime": "2017-05-26T22:46:21Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA8C07B4XP7GVY5EJ2", "expiration": "May 26, 2017 11:46:21 PM", "sessionToken": "FQoDYXdzECAaDOtWxLD2RiccP5D5XyLMAU85SgT5N3ehTJls0F8Btjlg3Abt6876sDC+dSry1L0OSGuIEgnbf3hYYGETgulozKTIysuGhmhL+bDgFxc4dQdbyLMbiFsPJJbjBnWb/sXOM4OC8pqfNTwoPsekKopRSOZ5p7zaiPlNcj+wYyJnMZNzViuCw7txv9lup3rAkbBJo4jPvwSE50l/hzL7YVLPWJOriCv+86KhsTnAH07MCh1XzHz5ywvMhgUJIBal+P4eZZs67kTr1CQ8kzpSadQfjpGmJptQumnO1rdYLCi94KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3057d6ab-b8a1-4cfa-9863-f22ac16e0c71", "record_id": "flaws_cloudtrail:0000314:3057d6ab-b8a1-4cfa-9863-f22ac16e0c71", "row_index": 314, "timestamp": "2017-05-26T22:46:22Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA8C07B4XP7GVY5EJ2", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1024, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3057d6ab-b8a1-4cfa-9863-f22ac16e0c71", "eventTime": "2017-05-26T22:46:22Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA8C07B4XP7GVY5EJ2", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:21Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8c1830e-90e1-4850-b766-3bc2d356c5e3", "record_id": "flaws_cloudtrail:0000315:c8c1830e-90e1-4850-b766-3bc2d356c5e3", "row_index": 315, "timestamp": "2017-05-26T22:46:23Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAWIT456QPRTXDUAJO", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1026, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8c1830e-90e1-4850-b766-3bc2d356c5e3", "eventTime": "2017-05-26T22:46:23Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAWIT456QPRTXDUAJO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a396e0a1-4b23-42f9-bedf-d640fec3dce6", "record_id": "flaws_cloudtrail:0000316:a396e0a1-4b23-42f9-bedf-d640fec3dce6", "row_index": 316, "timestamp": "2017-05-26T22:46:23Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a396e0a1-4b23-42f9-bedf-d640fec3dce6", "eventTime": "2017-05-26T22:46:23Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAWIT456QPRTXDUAJO", "expiration": "May 26, 2017 11:46:23 PM", "sessionToken": "FQoDYXdzECAaDBAJAn7xqSiQyumK2CLMAfbuQSB7iuixHO+4+qiQzWGOqC1f7S4t7OoNMZLLJZMXqNcRMdEZ20KjdIeV9Nb9nA1iv35oE1xuij1zv+cYhbmx/zqgmP4s4QjzV1XcLGRGX729htbqNown2oV5x1yDv5Z60I6jPyGdjMrxG3XKdfLlpibIMq9mD/FtL2Bktfm13qAcdKBI2L2rp6PyDQ3fpxMreQORGd7ZBlh8ZZNI1ZeYQ6b7BSp/uxBnREmig6JxmuULB+COSkJfVku+xMwTd5M/6Tj0UREkUa9cnSi/4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60f40ff8-ab41-4899-befe-3222f5d0cee7", "record_id": "flaws_cloudtrail:0000317:60f40ff8-ab41-4899-befe-3222f5d0cee7", "row_index": 317, "timestamp": "2017-05-26T22:46:24Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60f40ff8-ab41-4899-befe-3222f5d0cee7", "eventTime": "2017-05-26T22:46:24Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA77DYY3I56591OFZU", "expiration": "May 26, 2017 11:46:24 PM", "sessionToken": "FQoDYXdzECAaDA5iCa7uQ82GDccPoyLMATjInOJwo5tsdfiTXWgo9xpXwDJEc2HiDsH+wmLAKHLrHMxlFtrKtbc8Y2yVlddhwgw/Y2hek5SNhOcDo0mELsxTiTTiekP3gQ8hANTHHPQVhCDjwjw52oW7CW06Af2OCUV3qM2iTZjUG7hc9KVbk5Va/jTtVsiONm03UVZ/Phtjqqmt1uWf55q/Il3v4mHnM2LV7WVKxK8nNscVDWVXxd2bAVQ43hP44VilmhscO17OdnVAwVvcusbx/VZJuUUA/yZsSeD2b8MPrRu1sSjA4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b79a7cf1-d7df-4cae-80ae-2cedc8553f0b", "record_id": "flaws_cloudtrail:0000318:b79a7cf1-d7df-4cae-80ae-2cedc8553f0b", "row_index": 318, "timestamp": "2017-05-26T22:46:25Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA77DYY3I56591OFZU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1019, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b79a7cf1-d7df-4cae-80ae-2cedc8553f0b", "eventTime": "2017-05-26T22:46:25Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA77DYY3I56591OFZU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:24Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7851ee0-f32e-4935-83b1-20771e47d51", "record_id": "flaws_cloudtrail:0000319:d7851ee0-f32e-4935-83b1-20771e47d51", "row_index": 319, "timestamp": "2017-05-26T22:46:25Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7851ee0-f32e-4935-83b1-20771e47d51", "eventTime": "2017-05-26T22:46:25Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAXHQ5GYNE3I3N1DD7", "expiration": "May 26, 2017 11:46:25 PM", "sessionToken": "FQoDYXdzECAaDIBZwUU3o6w1Ql+L7CLMAYhQ4drMC2RVXZX2ieS2gNPLmho1kAevZDDwMAtsjGX2e/KjiVU6uufGtcHIW4/OGcAx7ErfuqT2S8TE/nvEZWWVdZtOw5pq/hJv2zAP2EOBhjMCgmpiSycMFw6SKXTBx3kyNuybo0ZWDZST0+Xbi4UrnNpu2PzJlhkUxgsJeqqYK+9IhQCp8p0d9GfqZCkHyUf1Yf8h2yUqVtezr2rgOl9tLp0Ky3/k7cCMG4BtKexYJB77jTBIeWzEi0/2tQTyo/3ZvicHUUS3vE16+SjB4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a4d1ca89-f16d-4e0a-8746-137c1f764ccc", "record_id": "flaws_cloudtrail:0000320:a4d1ca89-f16d-4e0a-8746-137c1f764ccc", "row_index": 320, "timestamp": "2017-05-26T22:46:26Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAXHQ5GYNE3I3N1DD7", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1023, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a4d1ca89-f16d-4e0a-8746-137c1f764ccc", "eventTime": "2017-05-26T22:46:26Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAXHQ5GYNE3I3N1DD7", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55540b-2a09-41a5-83c7-e78ddbec446c", "record_id": "flaws_cloudtrail:0000321:55540b-2a09-41a5-83c7-e78ddbec446c", "row_index": 321, "timestamp": "2017-05-26T22:46:26Z", "event_type": "ListSAMLProviders", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAKE5EB37RXF0TYRGH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 988, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55540b-2a09-41a5-83c7-e78ddbec446c", "eventTime": "2017-05-26T22:46:26Z", "eventName": "ListSAMLProviders", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAKE5EB37RXF0TYRGH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "responseElements": {"sAMLProviderList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a7dfed0-48cf-4104-b390-7eb089b9f81a", "record_id": "flaws_cloudtrail:0000322:7a7dfed0-48cf-4104-b390-7eb089b9f81a", "row_index": 322, "timestamp": "2017-05-26T22:46:27Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a7dfed0-48cf-4104-b390-7eb089b9f81a", "eventTime": "2017-05-26T22:46:27Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAFNGYAWEPUOA9JWMH", "expiration": "May 26, 2017 11:46:27 PM", "sessionToken": "FQoDYXdzECAaDPZbu2m3Jo8OrR7UzCLMAQyJU8iKleign/ASJQTrG/wnRmpECiYgi05tOPjI6YGIe5/QKhk9cEQoroa/o01vY6SXONVf3pCRKCV6rLWtqQ3v+uYPHesecU6Xg059ziCTANUkSHlqEYeHPLcTsxRc/SWK2BxNylLCWahKFhLmsMFfUw9o+bXJsIn1tVc6GJwYc/2kfGpYxnml9HAfm/ZDvyLv30uYkUljAMF3O/bL9N4KRTkpfAlQPZarS/rj6Q74TIBg2Jbivj0rFe8Puu6EW3JiZjWVtpuLkRC2KSjD4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a123491f2-9fe4-40f8-948a-aaabede69d90", "record_id": "flaws_cloudtrail:0000323:a123491f2-9fe4-40f8-948a-aaabede69d90", "row_index": 323, "timestamp": "2017-05-26T22:46:27Z", "event_type": "ListServerCertificates", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAFNGYAWEPUOA9JWMH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a123491f2-9fe4-40f8-948a-aaabede69d90", "eventTime": "2017-05-26T22:46:27Z", "eventName": "ListServerCertificates", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAFNGYAWEPUOA9JWMH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:27Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"pathPrefix": "/"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f0a2561-11ae-4981-8ce3-793df896698c3", "record_id": "flaws_cloudtrail:0000324:9f0a2561-11ae-4981-8ce3-793df896698c3", "row_index": 324, "timestamp": "2017-05-26T22:46:27Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAKE5EB37RXF0TYRGH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 988, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f0a2561-11ae-4981-8ce3-793df896698c3", "eventTime": "2017-05-26T22:46:27Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAKE5EB37RXF0TYRGH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"roleName": "flaws"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9bb3bc0d-c4bc-4e43-af0c-a6efa8aa8c27", "record_id": "flaws_cloudtrail:0000325:9bb3bc0d-c4bc-4e43-af0c-a6efa8aa8c27", "row_index": 325, "timestamp": "2017-05-26T22:46:27Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAKE5EB37RXF0TYRGH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 997, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9bb3bc0d-c4bc-4e43-af0c-a6efa8aa8c27", "eventTime": "2017-05-26T22:46:27Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAKE5EB37RXF0TYRGH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"roleName": "flaws"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbfa3ca1-d096-448e-8083-d5a443844", "record_id": "flaws_cloudtrail:0000326:fbfa3ca1-d096-448e-8083-d5a443844", "row_index": 326, "timestamp": "2017-05-26T22:46:27Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAKE5EB37RXF0TYRGH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 960, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbfa3ca1-d096-448e-8083-d5a443844", "eventTime": "2017-05-26T22:46:27Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAKE5EB37RXF0TYRGH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c44c54a-482c-4582-850f-c080f6bf9d77", "record_id": "flaws_cloudtrail:0000327:5c44c54a-482c-4582-850f-c080f6bf9d77", "row_index": 327, "timestamp": "2017-05-26T22:46:27Z", "event_type": "GetRolePolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAKE5EB37RXF0TYRGH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1018, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c44c54a-482c-4582-850f-c080f6bf9d77", "eventTime": "2017-05-26T22:46:27Z", "eventName": "GetRolePolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAKE5EB37RXF0TYRGH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"policyName": "read_level_6_bucket", "roleName": "flaws"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc07452a-b6db-4c2f-82e7-72d0111f4592", "record_id": "flaws_cloudtrail:0000328:cc07452a-b6db-4c2f-82e7-72d0111f4592", "row_index": 328, "timestamp": "2017-05-26T22:46:27Z", "event_type": "ListAttachedRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAKE5EB37RXF0TYRGH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 994, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc07452a-b6db-4c2f-82e7-72d0111f4592", "eventTime": "2017-05-26T22:46:27Z", "eventName": "ListAttachedRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAKE5EB37RXF0TYRGH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"roleName": "flaws"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "365a2abb-e5c3-420a-a3c2-de5982fff414", "record_id": "flaws_cloudtrail:0000329:365a2abb-e5c3-420a-a3c2-de5982fff414", "row_index": 329, "timestamp": "2017-05-26T22:46:28Z", "event_type": "ListAttachedRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAKE5EB37RXF0TYRGH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1003, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "365a2abb-e5c3-420a-a3c2-de5982fff414", "eventTime": "2017-05-26T22:46:28Z", "eventName": "ListAttachedRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAKE5EB37RXF0TYRGH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"roleName": "SecurityMonkey"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c41337-1b5c-425d-8c26-e9b5fe585379", "record_id": "flaws_cloudtrail:0000330:5c41337-1b5c-425d-8c26-e9b5fe585379", "row_index": 330, "timestamp": "2017-05-26T22:46:28Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAKE5EB37RXF0TYRGH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 997, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c41337-1b5c-425d-8c26-e9b5fe585379", "eventTime": "2017-05-26T22:46:28Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAKE5EB37RXF0TYRGH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"roleName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "967dbf71-5892-467d-9762-085892bb724", "record_id": "flaws_cloudtrail:0000331:967dbf71-5892-467d-9762-085892bb724", "row_index": 331, "timestamp": "2017-05-26T22:46:28Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAKE5EB37RXF0TYRGH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 994, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "967dbf71-5892-467d-9762-085892bb724", "eventTime": "2017-05-26T22:46:28Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAKE5EB37RXF0TYRGH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"roleName": "SecurityMonkey"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "492b6215-a82d-4546-9e33-69ab079501", "record_id": "flaws_cloudtrail:0000332:492b6215-a82d-4546-9e33-69ab079501", "row_index": 332, "timestamp": "2017-05-26T22:46:28Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAKE5EB37RXF0TYRGH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "492b6215-a82d-4546-9e33-69ab079501", "eventTime": "2017-05-26T22:46:28Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAKE5EB37RXF0TYRGH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"roleName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d96a0353-ab64-4629-b3ab-279aea3f3830", "record_id": "flaws_cloudtrail:0000333:d96a0353-ab64-4629-b3ab-279aea3f3830", "row_index": 333, "timestamp": "2017-05-26T22:46:28Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAKE5EB37RXF0TYRGH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1006, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d96a0353-ab64-4629-b3ab-279aea3f3830", "eventTime": "2017-05-26T22:46:28Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAKE5EB37RXF0TYRGH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"roleName": "SecurityMonkey"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2caaffa5-ecfa-4a12-90b7-e2e2f63829a", "record_id": "flaws_cloudtrail:0000334:2caaffa5-ecfa-4a12-90b7-e2e2f63829a", "row_index": 334, "timestamp": "2017-05-26T22:46:28Z", "event_type": "ListAttachedRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAKE5EB37RXF0TYRGH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 994, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2caaffa5-ecfa-4a12-90b7-e2e2f63829a", "eventTime": "2017-05-26T22:46:28Z", "eventName": "ListAttachedRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAKE5EB37RXF0TYRGH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:44:05Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"roleName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f22273-fed1-4612-99c8-9f4ea56c56ad", "record_id": "flaws_cloudtrail:0000335:f22273-fed1-4612-99c8-9f4ea56c56ad", "row_index": 335, "timestamp": "2017-05-26T22:46:29Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f22273-fed1-4612-99c8-9f4ea56c56ad", "eventTime": "2017-05-26T22:46:29Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIANEMLC5N3W74E93G1", "expiration": "May 26, 2017 11:46:29 PM", "sessionToken": "FQoDYXdzECAaDMwk8L1fg8rQBHeyWyLMAdGCZXw2dQVYgJZCV3nacgcwzfx7F0SvyKHpW1y2cFv+idF//9BPYTmKlFIpvJn/4bMttfgSY/j3nMhfYC/ngbb8QdAv+Xk/VKm8Fr2lnPr6GN58vHGapCSFLxCxhu+LB10sZohHw0suW9wijhA/KkkV6QVfdGgTv8xE8WpvZlJ7l/APlXFoegL/AMK+UQIR8z9WfhteqB88nyDreT+csdP9lgjwbYyrN2ZgUfwRKq5YFtg4WB5JmUnEkWzwQ1ypulQFGLtlJm0fZZeZQCjF4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "759d4588-6398-4bc6-bc29-bc62e789164", "record_id": "flaws_cloudtrail:0000336:759d4588-6398-4bc6-bc29-bc62e789164", "row_index": 336, "timestamp": "2017-05-26T22:46:30Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "759d4588-6398-4bc6-bc29-bc62e789164", "eventTime": "2017-05-26T22:46:30Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA7TJUIBHI1OLS1QTZ", "expiration": "May 26, 2017 11:46:30 PM", "sessionToken": "FQoDYXdzECAaDHWqHv4HjTyX9vRiCiLMAREXGRLIiCDJ0amMFbFCe4MCSBYEWjXNdVjWlFoF/2pidBejuW2b+9EHVvqX+bEpQ4Ij/k89FTZoGUh5XlB5nEJFm0LnOp1ZDL1HXEU7pCOke1NjW1jwryM48m8HfUq/Ff7uSkftgtW1hRgdf8wSotODX2RCfe0pQwmc6LB9TLTebqhk4lH2CLCWcgMQjZDGP0rj8IKm0FDa79zMOemOFoctd4egdCuClC/X1x/lyBJkfa9bDnKeqkCqgZeKWr/GcG3KTFdY7FqIK0Q+qCjG4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af8bdb1e-22c5-4a51-9c41-a7b51e2ea8c5", "record_id": "flaws_cloudtrail:0000337:af8bdb1e-22c5-4a51-9c41-a7b51e2ea8c5", "row_index": 337, "timestamp": "2017-05-26T22:46:30Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAXQJ7FBSA33BHFZZS", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1002, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af8bdb1e-22c5-4a51-9c41-a7b51e2ea8c5", "eventTime": "2017-05-26T22:46:30Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAXQJ7FBSA33BHFZZS", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:29Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54447-0ace-4700-a52f-573bc66a1677", "record_id": "flaws_cloudtrail:0000338:54447-0ace-4700-a52f-573bc66a1677", "row_index": 338, "timestamp": "2017-05-26T22:46:31Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1451, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54447-0ace-4700-a52f-573bc66a1677", "eventTime": "2017-05-26T22:46:31Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA98D40ALYFCLF4JAQ", "expiration": "May 26, 2017 11:46:31 PM", "sessionToken": "FQoDYXdzECAaDKxy7Z69aS8zlxm+9SLMAQ6h8mILCPfNDNd0UvQE4+1sDU8HUQeZ9qALKBF910aTrAffTUC9owaDrePNU5/G8TypDbN+oA5bNBoEFM7C0POr3fDPWgD1uoDMajzXoFlk2JXT3Fo4heZwj61StSUEmMzzUbdR0XbnrKgRe88+lX8wGWA0bC1qQxSbo9a9i7pNB+aBovJcEMvj4p5r2VX7StRn6gTU0hOZ2dR9mle1sRhDRGUmhzkicVbkC5oD+AeqxFT7/MxacU99aBQzAmoeJdz5YphJNqwMLDqF9SjH4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a999835-0f1d-448c-8d55-9a57cdd5e6ab", "record_id": "flaws_cloudtrail:0000339:9a999835-0f1d-448c-8d55-9a57cdd5e6ab", "row_index": 339, "timestamp": "2017-05-26T22:46:31Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA3XB8T3JE7EUIA8T6", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1000, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a999835-0f1d-448c-8d55-9a57cdd5e6ab", "eventTime": "2017-05-26T22:46:31Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA3XB8T3JE7EUIA8T6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:30Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b069e2c5-61ee-4b90-aff0-09470d6569c6", "record_id": "flaws_cloudtrail:0000340:b069e2c5-61ee-4b90-aff0-09470d6569c6", "row_index": 340, "timestamp": "2017-05-26T22:46:32Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA9CI4EG4EJY64HDPR", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1007, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b069e2c5-61ee-4b90-aff0-09470d6569c6", "eventTime": "2017-05-26T22:46:32Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA9CI4EG4EJY64HDPR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:31Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "474f9846-22ea-4df3-a131-8d190eac06a9", "record_id": "flaws_cloudtrail:0000341:474f9846-22ea-4df3-a131-8d190eac06a9", "row_index": 341, "timestamp": "2017-05-26T22:46:32Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "474f9846-22ea-4df3-a131-8d190eac06a9", "eventTime": "2017-05-26T22:46:32Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA6UT8MO0TJXEN2GGK", "expiration": "May 26, 2017 11:46:32 PM", "sessionToken": "FQoDYXdzECAaDCKfN7QYvPS/rNlQOiLMARNkzZAnodsZcl4jtQwSn3uXV7WXqmHaFB3HbQP2ZenTaJA80VpXAsPlTdzpkqJrln78XSL0Aej9u2Ut0CePIuJc25fPfcez2YimleLr3CzS9HSOo7MKaMEBRNfyUCIjOkACJdakA4dx4Xw1CuzEbjZVmrRSpLosswaILQYImQrDk+9m+4ghiGj8iVKsT7e+fDH0sIh2RyMioNYE4q2Qem3Fq7oJLM9Z2i1Oj1osVYnNxn41sGOoTCcDws4h6TcgINZpyuNj85nw730aFijI4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "493225d-0603-4ea4-a0ce-439e8aa10a1b", "record_id": "flaws_cloudtrail:0000342:493225d-0603-4ea4-a0ce-439e8aa10a1b", "row_index": 342, "timestamp": "2017-05-26T22:46:33Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIASODW4IP0HDF69ZOT", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1007, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "493225d-0603-4ea4-a0ce-439e8aa10a1b", "eventTime": "2017-05-26T22:46:33Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIASODW4IP0HDF69ZOT", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:32Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21f955f9-3c6b-479b-9a33-8b95863d145", "record_id": "flaws_cloudtrail:0000343:21f955f9-3c6b-479b-9a33-8b95863d145", "row_index": 343, "timestamp": "2017-05-26T22:46:34Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21f955f9-3c6b-479b-9a33-8b95863d145", "eventTime": "2017-05-26T22:46:34Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAASROZTXIOMS0WY0N", "expiration": "May 26, 2017 11:46:34 PM", "sessionToken": "FQoDYXdzECAaDLaMlmy6oZmPSwrudyLMAbq8gos6L+xkYeuTzgHW+Xe354+ChOSqjSaRxQ/VsH9vOde1ctmDvDtJF+b2ouKgGuvkaupUr851PtPoDLt5LVcpTgBLEKh2DI3TkDXRCj02GIBM0iN7sdLwfeD4fTsIE4PDYtgNMJ93zbo/nDbOvQXOZ0PWTInp6HL72VzF/xhE76daqnsaMpYcFZojeOChd6Nbr6sF5CnKi+6abV9C41MLBaz2YKsRAMEFKPtcILAyYjvZ3F8YxDgBqMAt1Rxa8yuWYG4ti79N5406iijK4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1544f8c7-5687-4d89-8f77-58ee4e9e9304", "record_id": "flaws_cloudtrail:0000344:1544f8c7-5687-4d89-8f77-58ee4e9e9304", "row_index": 344, "timestamp": "2017-05-26T22:46:35Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAJ2VDYIV19LWRZW4Z", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1002, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1544f8c7-5687-4d89-8f77-58ee4e9e9304", "eventTime": "2017-05-26T22:46:35Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAJ2VDYIV19LWRZW4Z", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:34Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eea5971a-fc1c-40b0-ad29-bff1836edbf3", "record_id": "flaws_cloudtrail:0000345:eea5971a-fc1c-40b0-ad29-bff1836edbf3", "row_index": 345, "timestamp": "2017-05-26T22:46:35Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eea5971a-fc1c-40b0-ad29-bff1836edbf3", "eventTime": "2017-05-26T22:46:35Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA8ZOSQ887VECV5TG7", "expiration": "May 26, 2017 11:46:35 PM", "sessionToken": "FQoDYXdzECAaDM4Ud11Jgd0wCNtR0yLMAQnhOgDTX+hY0CHgrT6Z2esG6XKjFna9hxGS8uvBCrIq2FXAUfOHgml9gGjkx72iPsMSn0zw4SnibIfurj4pvR/vOwRriHW5nuLQ1cwsRgM7t2VbDTs19EVSFY3EUq6uD8v21F5I98KG2n21eNuiNd1+TxxnQSHpDij9ePHEWWtVXYVLw+YfQC4VG8wMMk44hQBhgLMImY5Ip4XefOESUIqRxXNF5LagfOpxxtmcErZHaqYLa2FxLcaBpZU5ct5T2RnmPWmu0Z6CmuhR8ijL4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b6deb5a-1fcb-4026-9f48-55efda20db36", "record_id": "flaws_cloudtrail:0000346:2b6deb5a-1fcb-4026-9f48-55efda20db36", "row_index": 346, "timestamp": "2017-05-26T22:46:36Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAR0LHMOJIIH9J6H4W", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1007, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b6deb5a-1fcb-4026-9f48-55efda20db36", "eventTime": "2017-05-26T22:46:36Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAR0LHMOJIIH9J6H4W", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:35Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b408df72-593e-4e83-9d24-97b8446afdef", "record_id": "flaws_cloudtrail:0000347:b408df72-593e-4e83-9d24-97b8446afdef", "row_index": 347, "timestamp": "2017-05-26T22:46:37Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b408df72-593e-4e83-9d24-97b8446afdef", "eventTime": "2017-05-26T22:46:37Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA0DBU0NSORSEKLVFH", "expiration": "May 26, 2017 11:46:37 PM", "sessionToken": "FQoDYXdzECAaDBGvGmeC2m0s2/uKJSLMAdXXV2DKrM6wzF2WOVHZCdw8Bic8OuofsnBDnQfkT6YZrClF7MnLcVDmWYYCOzjkov62fGNHpUNI/L+XNawO1nCr1WWyZIQGv/E3LvuETkYlIAdR6rEJgNbw1Te9EuUU//rf1WlbvKw+ieljRqOhmlfZBt4a2/npbh32G5MKzXzd66fM+JUFBEnuDIWnAVRWcknEELPsoW9sCVwVp8Fsr43XvMKIGf9fXCIlwA2en15awTlOUxtvAt/CWHS7qh3IQ/hTPyqkf/FpXJ9t6CjN4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9cdf4ff2-9675-433f-8582-ab0d98f812a3", "record_id": "flaws_cloudtrail:0000348:9cdf4ff2-9675-433f-8582-ab0d98f812a3", "row_index": 348, "timestamp": "2017-05-26T22:46:37Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA0DBU0NSORSEKLVFH", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1006, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9cdf4ff2-9675-433f-8582-ab0d98f812a3", "eventTime": "2017-05-26T22:46:37Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA0DBU0NSORSEKLVFH", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:37Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"DescribeVpcEndpointsRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6455aea-5229-41d4-832f-f383ec801a66", "record_id": "flaws_cloudtrail:0000349:e6455aea-5229-41d4-832f-f383ec801a66", "row_index": 349, "timestamp": "2017-05-26T22:46:38Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6455aea-5229-41d4-832f-f383ec801a66", "eventTime": "2017-05-26T22:46:38Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA94JR4EKNE1HSUC70", "expiration": "May 26, 2017 11:46:38 PM", "sessionToken": "FQoDYXdzECAaDLqmb39ZuJjdF08UVyLMAX0xNhJCnHmPwVKUrZAMsJasWyeOGvUOpzL37dEgPb7r8VSsFwyjYuOCWj7l0kfsxgrKoFbVVijlLkI6yEZVW1A0HAmPnfObEkug8mjZeEbIT9BbaVq+9Q16ZcEpSCsUqksjvhydYULi+RUUW+paGnTSHS415H1J2aRajVzBPD27faMlgz+5G4hE/34hfj64QiQmzlUOXSlhBzUqgrd5uj1IXRhdf/mrggtx/gA3qLzf6meHRqc3w686VkphpETjNSztOGaB9r+QZI1aSCjO4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8aab043-db4d-4a8a-8039-fb4179c44ae8", "record_id": "flaws_cloudtrail:0000350:b8aab043-db4d-4a8a-8039-fb4179c44ae8", "row_index": 350, "timestamp": "2017-05-26T22:46:39Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAH2P916OAGFRH1P41", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1007, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8aab043-db4d-4a8a-8039-fb4179c44ae8", "eventTime": "2017-05-26T22:46:39Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAH2P916OAGFRH1P41", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:38Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a71cf40d-529e-4fc0-a1c9-1faed28a5de4", "record_id": "flaws_cloudtrail:0000351:a71cf40d-529e-4fc0-a1c9-1faed28a5de4", "row_index": 351, "timestamp": "2017-05-26T22:46:39Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a71cf40d-529e-4fc0-a1c9-1faed28a5de4", "eventTime": "2017-05-26T22:46:39Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAM0YAWYBVUVAQ3R3M", "expiration": "May 26, 2017 11:46:39 PM", "sessionToken": "FQoDYXdzECAaDJs4/l6o3oIFXEcD0iLMASw0MG06xH8a4vQ1eeVldrXjoxH7bx1AABDI46RaTAXgVIUF4p+BEI61vKGm2lbwws9UepUQGXJ5WkAE0M7LW1dgXRePGtcrwDvJ2CkxOQl1yZhabqsL3Gb9njhe4tVnCFb+R+pdCUUQ7Zgxf4B/t3Zw+Pa9z9HmM5bq8/7Xa0ly4povlwjAXfTubpdVmKlGwNJjTCuEuhn0VKMZCNAlWbg7vjTbfAGsqbACAzIGqgEMOt6Njja1O8rFZcj9hbuNsij1mm1hpqO0st3jMSjP4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd11ed7e-6498-45d7-b146-85d34369a", "record_id": "flaws_cloudtrail:0000352:cd11ed7e-6498-45d7-b146-85d34369a", "row_index": 352, "timestamp": "2017-05-26T22:46:40Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAM0YAWYBVUVAQ3R3M", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1005, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd11ed7e-6498-45d7-b146-85d34369a", "eventTime": "2017-05-26T22:46:40Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAM0YAWYBVUVAQ3R3M", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:39Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"DescribeVpcEndpointsRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e945c4fa-225d-4e34-a80c-d8ad978f1bd9", "record_id": "flaws_cloudtrail:0000353:e945c4fa-225d-4e34-a80c-d8ad978f1bd9", "row_index": 353, "timestamp": "2017-05-26T22:46:40Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e945c4fa-225d-4e34-a80c-d8ad978f1bd9", "eventTime": "2017-05-26T22:46:40Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIATMAPB2PBFGP0TE24", "expiration": "May 26, 2017 11:46:40 PM", "sessionToken": "FQoDYXdzECAaDMpVq2R4SGpMD35MbSLMAfM4si+zQLZCEvVGNu3tmV7dKvs+TVpviPd/KxwBafWlXIlYJaDkZ/1WFtbmjSrjsMlPC/92yehSN/NxjhssfgbIe/U0in/DWg5xevEh21qRl44dgUcGGkcDhVoQbrEzMLFsjpqQ60Kd8J5dR+FmU7/oRV7DrgFTaIn25rCIDa2kN4Z8HX5r+/FBXrUKJpwSMi9Qkkm2CvWBOIyYg8y4O9BuOKlM7xzcJpTPXM4235E+eErw3yp7C/qfmBZOK5IfshVhHqYHZloTK0fEQyjQ4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a76682-c886-418d-b199-7a29db223d9a", "record_id": "flaws_cloudtrail:0000354:a76682-c886-418d-b199-7a29db223d9a", "row_index": 354, "timestamp": "2017-05-26T22:46:42Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a76682-c886-418d-b199-7a29db223d9a", "eventTime": "2017-05-26T22:46:42Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAD10HUFMQQ1R29CPV", "expiration": "May 26, 2017 11:46:42 PM", "sessionToken": "FQoDYXdzECAaDLW3eZwlMfPirLcsKiLMAd/2307UvK5NIld98xKpQaGzcxx3JpSlKCHw+QRWneUm0xNKDQDZDUZUVgdESCtPHQY+r7eMXF6ESu6RoMUtPk2B3j49noiCWOAPE/UTfuS53PboGCs7aNKZ8ec7yWif73LLllJkOxktzbXz1BILx6epvPnsBRVf5+o4pKoZZVFhk0Y/iOgiQk3BCZ7M4468Qzlyf1vTGhS5RqEsVXAYPZj7icKJ53rXbMy4l5aI7DfewFNOi5Pn9w4uUCNEXtDFTRGHWNpSSD0yjSvvhSjS4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "496c65e0-ea6f-40df-be9e-a103c033b877", "record_id": "flaws_cloudtrail:0000355:496c65e0-ea6f-40df-be9e-a103c033b877", "row_index": 355, "timestamp": "2017-05-26T22:46:42Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "496c65e0-ea6f-40df-be9e-a103c033b877", "eventTime": "2017-05-26T22:46:42Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA56XXSE12372Q2TZZ", "expiration": "May 26, 2017 11:46:42 PM", "sessionToken": "FQoDYXdzECAaDL0nNxA/FqDEhxz0OiLMAV0y8gRNiR5hLKWpgH7+8LMJM0b9bEA/OhtpcuqDxc4ro9g6RVl347BrZzLar4j3cVJsWJiuLSbY1B0IzPYvzOLQjUxJ0/Mv/BIQCJYwn9QKhY8o9MK6Q6xack2WkZAb1xr+/B8Roi0oQRI2H1DAI9rxSZk9GU6jQAsJStrIwKOp5f/IvDG9b7rZc4z6YnTTsVtIkt4ulDCMhmsIY833RSkyrsUKy4DecRY7lEmefK+KJ9cfvwMeULn1eLqAOrj4Y1vMAqyH4K2rcYVzLSjS4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "861629c71-6242-4d86-8f79-be99ed0bc324", "record_id": "flaws_cloudtrail:0000356:861629c71-6242-4d86-8f79-be99ed0bc324", "row_index": 356, "timestamp": "2017-05-26T22:46:42Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAZ2I58TT5J93LV1NX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1003, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "861629c71-6242-4d86-8f79-be99ed0bc324", "eventTime": "2017-05-26T22:46:42Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAZ2I58TT5J93LV1NX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:42Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15971-496e-4b13-a131-c486aa5ac22a", "record_id": "flaws_cloudtrail:0000357:15971-496e-4b13-a131-c486aa5ac22a", "row_index": 357, "timestamp": "2017-05-26T22:46:43Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1451, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15971-496e-4b13-a131-c486aa5ac22a", "eventTime": "2017-05-26T22:46:43Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIABLKBYETEH9AKUMRU", "expiration": "May 26, 2017 11:46:43 PM", "sessionToken": "FQoDYXdzECAaDMKjiXCxUI4CHbPPLCLMARfWmrRsQQ4AFlKah81MpRJN6F6Q4WDIMsk7qTv9o/HTcnbh1TDZJcj2VNbSgmG2eJfnFlF5Vwz0iq8rpTyzDT0wY4q/0DLnrK8+9WBXyJl7wDOCfHGQcEk++DZFZuFKpJsMxh2eocTJQv3nDjefBQFxN6UxPRviRXQtuf8g1hUFBh6Fe8XXddS69yZZMhZAiqjMIaYT/fp5DW/fyiUDoBOL9nOz2IotZ4IJ1ThdMwZSYA9fXECKJ3dLeujAkoapgRj76D+vY6Hd1YwuFijT4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a731530-de91-4c36-9478-43014bbd3da3", "record_id": "flaws_cloudtrail:0000358:2a731530-de91-4c36-9478-43014bbd3da3", "row_index": 358, "timestamp": "2017-05-26T22:46:44Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIACZPHGE92PIUGWL8K", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1004, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a731530-de91-4c36-9478-43014bbd3da3", "eventTime": "2017-05-26T22:46:44Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIACZPHGE92PIUGWL8K", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:43Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fcada946-d2b8-4e95-a0ec-62ba553acc39", "record_id": "flaws_cloudtrail:0000359:fcada946-d2b8-4e95-a0ec-62ba553acc39", "row_index": 359, "timestamp": "2017-05-26T22:46:45Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fcada946-d2b8-4e95-a0ec-62ba553acc39", "eventTime": "2017-05-26T22:46:45Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAPXR16VT8U161TY87", "expiration": "May 26, 2017 11:46:45 PM", "sessionToken": "FQoDYXdzECAaDGRB/chSaIOGdX083iLMAc/Kfo7fvH3hHUEdGF+SJYKe4CnIDuZ9W4dD+k6XcQidHytXlA9OMg0j395nEHQnA/dL+MMzKfGLFR92CXMN7AbF8KuHnmPMOLBXOTb7VUklCBHpavgSjFqwg9eZHTRuJYHnlsAwSB4sA+pi9WuuKZ+KUBqC2k8647EPnm+KuYgvivr5PkJuj9w+LkLppMQ42GR9xzKelsYQg5DoQpx5LRibYXAczh6Z23oJr8lq1/bpqYB84D7Rr2j480FkK7x0mJlZzp2XFKwKWJ2xhCjV4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f61db7f-ea7e-43b2-86c5-9d92554d8f47", "record_id": "flaws_cloudtrail:0000360:3f61db7f-ea7e-43b2-86c5-9d92554d8f47", "row_index": 360, "timestamp": "2017-05-26T22:46:45Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIA9ZJX9RD4XNBCQNH0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "116.64.169.60", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 599, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f61db7f-ea7e-43b2-86c5-9d92554d8f47", "eventTime": "2017-05-26T22:46:45Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "116.64.169.60", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIA9ZJX9RD4XNBCQNH0", "userName": "SecurityMokey"}, "requestParameters": {"userName": "SecurityMokey"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e62a565f-b134-4a72-9db5-a771a0fd3115", "record_id": "flaws_cloudtrail:0000361:e62a565f-b134-4a72-9db5-a771a0fd3115", "row_index": 361, "timestamp": "2017-05-26T22:46:46Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAXNYSMV34QE4FS7IZ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1004, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e62a565f-b134-4a72-9db5-a771a0fd3115", "eventTime": "2017-05-26T22:46:46Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAXNYSMV34QE4FS7IZ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:45Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "620a5582-6966-4ccb-a055-2db392080f58b", "record_id": "flaws_cloudtrail:0000362:620a5582-6966-4ccb-a055-2db392080f58b", "row_index": 362, "timestamp": "2017-05-26T22:46:46Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1455, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "620a5582-6966-4ccb-a055-2db392080f58b", "eventTime": "2017-05-26T22:46:46Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIARPLZILV8IJHE5ASK", "expiration": "May 26, 2017 11:46:46 PM", "sessionToken": "FQoDYXdzECAaDEeAnoO8mmj0TlAoJyLMAcA9zBTsH6HIUM0kj7Qriwy0awXvRqwsh3DT/UO2QNRqazJnbGStVeciPd3JquPonr0ba3bjHSJiLRte4r7zmDOO+7I4mpd0pFsgdcom3yLOCyrVzesbyONz1TS94ghl6R1/C3ZH4UbT8nVL1pRut86imwwrYZS46UjJuMFnrVDLLmU7Td/1gBZdHVvAIqHM7p8fBuSstDI6SB1ylJSVw5W7A8BWC99nAtjzMMoPvxbfO5gcS6hIdJN01pW+2v0xukR1JisIYYftMHiDjSjW4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1bd82d46-b8c6-46d6-a52f-01b57f9f702c", "record_id": "flaws_cloudtrail:0000363:1bd82d46-b8c6-46d6-a52f-01b57f9f702c", "row_index": 363, "timestamp": "2017-05-26T22:46:47Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAJJYX6YSUUEIHWFBO", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1003, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1bd82d46-b8c6-46d6-a52f-01b57f9f702c", "eventTime": "2017-05-26T22:46:47Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAJJYX6YSUUEIHWFBO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:46Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d923e26-1e0d-4c09-93f2-853e336da1eb", "record_id": "flaws_cloudtrail:0000364:9d923e26-1e0d-4c09-93f2-853e336da1eb", "row_index": 364, "timestamp": "2017-05-26T22:46:47Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d923e26-1e0d-4c09-93f2-853e336da1eb", "eventTime": "2017-05-26T22:46:47Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAXCUQ98KRYL0UEZHG", "expiration": "May 26, 2017 11:46:47 PM", "sessionToken": "FQoDYXdzECAaDLAy2fK7ROdrRT9TZSLMAavqa3oo+9n5QBsd2XGWQXsPewCG3f/nBrT/hX6OxVltVFySBOzeLlPYkMxkueU5GG6Bxjdz0PPY2cPQDbxsE2EzjfEGgI5UiNJD9G7cvozqUFHQx12QCupoEUf2GqRQQ1nn8i7gHiCnP8QS9FvDLGJ2ZzBUls/WIVD2HeQM5WTIYT5YW3P2ALsxm8Kq8AuOj1E4LVtyY0f5SAJTuuDm77m4byaIo7i1xptN0gzfdNhyv+xxSfhfP4nIvJQnPzuzaH+S+yFQgew95fcY/ijX4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1ee6542-8a14-4def-bb0a-596702b41be0", "record_id": "flaws_cloudtrail:0000365:d1ee6542-8a14-4def-bb0a-596702b41be0", "row_index": 365, "timestamp": "2017-05-26T22:46:48Z", "event_type": "DescribeVpcEndpoints", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAXCUQ98KRYL0UEZHG", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1006, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1ee6542-8a14-4def-bb0a-596702b41be0", "eventTime": "2017-05-26T22:46:48Z", "eventName": "DescribeVpcEndpoints", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAXCUQ98KRYL0UEZHG", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:47Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"DescribeVpcEndpointsRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c8a05ff-f97c-4e96-91b2-210ef0e2d941", "record_id": "flaws_cloudtrail:0000366:0c8a05ff-f97c-4e96-91b2-210ef0e2d941", "row_index": 366, "timestamp": "2017-05-26T22:46:48Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1451, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c8a05ff-f97c-4e96-91b2-210ef0e2d941", "eventTime": "2017-05-26T22:46:48Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAI0MDQM9GGP2SN78I", "expiration": "May 26, 2017 11:46:48 PM", "sessionToken": "FQoDYXdzECAaDAJPSm/hRlpo8+0uUiLMAfdMYsb9JiZRUAvzC/EYmKDB6COQ8LkNKWgmDX1u2TnDPiU62MHTBGX+wqGfYjSiA9tJKjaNVIdX4PUr8Ld9mRr8yjjaOx8lJ164q91y2mHyNNHhY38AxuhNrbL3oXqwP3LQIt2uvq6Cdo3LYvdwR4TQwzJ3ttQRRBe5h5PkeaUu8Gy2WPe6D79x+1qk15uaU+DMjurSc4hhuCAThGOMknZdIlcIbXM6PHdvKqz2q5ZYDFJWPZwrTB8wOE2chRr5SCCIYZzQDsNHm4eHRijY4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b60b6a5-2f3b-43a4-b2f2-2756ed86f6c4", "record_id": "flaws_cloudtrail:0000367:7b60b6a5-2f3b-43a4-b2f2-2756ed86f6c4", "row_index": 367, "timestamp": "2017-05-26T22:46:50Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI0MDQM9GGP2SN78I", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1013, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b60b6a5-2f3b-43a4-b2f2-2756ed86f6c4", "eventTime": "2017-05-26T22:46:50Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI0MDQM9GGP2SN78I", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:48Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "256711e6-3589-43c5-acd5-cecc57cbc6f1", "record_id": "flaws_cloudtrail:0000368:256711e6-3589-43c5-acd5-cecc57cbc6f1", "row_index": 368, "timestamp": "2017-05-26T22:46:51Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI0MDQM9GGP2SN78I", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1013, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "256711e6-3589-43c5-acd5-cecc57cbc6f1", "eventTime": "2017-05-26T22:46:51Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI0MDQM9GGP2SN78I", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:48Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f29daaf0-2ff6-4c90-9784-5b813f97813", "record_id": "flaws_cloudtrail:0000369:f29daaf0-2ff6-4c90-9784-5b813f97813", "row_index": 369, "timestamp": "2017-05-26T22:46:52Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI0MDQM9GGP2SN78I", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1007, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f29daaf0-2ff6-4c90-9784-5b813f97813", "eventTime": "2017-05-26T22:46:52Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI0MDQM9GGP2SN78I", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:48Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60b86e30-be72-49b7-8bd9-fe13236a", "record_id": "flaws_cloudtrail:0000370:60b86e30-be72-49b7-8bd9-fe13236a", "row_index": 370, "timestamp": "2017-05-26T22:46:53Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI0MDQM9GGP2SN78I", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1009, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60b86e30-be72-49b7-8bd9-fe13236a", "eventTime": "2017-05-26T22:46:53Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI0MDQM9GGP2SN78I", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:48Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fcc0d93f-e501-4bfc-9c3d-9ba45abeed73", "record_id": "flaws_cloudtrail:0000371:fcc0d93f-e501-4bfc-9c3d-9ba45abeed73", "row_index": 371, "timestamp": "2017-05-26T22:46:55Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI0MDQM9GGP2SN78I", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1013, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fcc0d93f-e501-4bfc-9c3d-9ba45abeed73", "eventTime": "2017-05-26T22:46:55Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI0MDQM9GGP2SN78I", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:48Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "048f1e23-3d9d-4f26-98d2-b89747d86", "record_id": "flaws_cloudtrail:0000372:048f1e23-3d9d-4f26-98d2-b89747d86", "row_index": 372, "timestamp": "2017-05-26T22:46:55Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI0MDQM9GGP2SN78I", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "048f1e23-3d9d-4f26-98d2-b89747d86", "eventTime": "2017-05-26T22:46:55Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI0MDQM9GGP2SN78I", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:48Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b3652d9-adf5-4bab-8328-7f086611c0f7", "record_id": "flaws_cloudtrail:0000373:2b3652d9-adf5-4bab-8328-7f086611c0f7", "row_index": 373, "timestamp": "2017-05-26T22:46:56Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI0MDQM9GGP2SN78I", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1011, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b3652d9-adf5-4bab-8328-7f086611c0f7", "eventTime": "2017-05-26T22:46:56Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI0MDQM9GGP2SN78I", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:48Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e58b8547-7b56-494d-bd67-15c1510bc0b0", "record_id": "flaws_cloudtrail:0000374:e58b8547-7b56-494d-bd67-15c1510bc0b0", "row_index": 374, "timestamp": "2017-05-26T22:46:57Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI0MDQM9GGP2SN78I", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e58b8547-7b56-494d-bd67-15c1510bc0b0", "eventTime": "2017-05-26T22:46:57Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI0MDQM9GGP2SN78I", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:48Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a543727a-7e96-48da-89b4-0baaa33408d", "record_id": "flaws_cloudtrail:0000375:a543727a-7e96-48da-89b4-0baaa33408d", "row_index": 375, "timestamp": "2017-05-26T22:46:58Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI0MDQM9GGP2SN78I", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1007, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a543727a-7e96-48da-89b4-0baaa33408d", "eventTime": "2017-05-26T22:46:58Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI0MDQM9GGP2SN78I", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:48Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ade2c8ed-cb1e-4971-a74e-f67adb048e74", "record_id": "flaws_cloudtrail:0000376:ade2c8ed-cb1e-4971-a74e-f67adb048e74", "row_index": 376, "timestamp": "2017-05-26T22:46:59Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI0MDQM9GGP2SN78I", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ade2c8ed-cb1e-4971-a74e-f67adb048e74", "eventTime": "2017-05-26T22:46:59Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI0MDQM9GGP2SN78I", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:48Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0dbc36d-cf7b-4c48-afa2-68de3cf258929", "record_id": "flaws_cloudtrail:0000377:d0dbc36d-cf7b-4c48-afa2-68de3cf258929", "row_index": 377, "timestamp": "2017-05-26T22:47:00Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI0MDQM9GGP2SN78I", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1009, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0dbc36d-cf7b-4c48-afa2-68de3cf258929", "eventTime": "2017-05-26T22:47:00Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI0MDQM9GGP2SN78I", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:48Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "351c05bb-48e0-4317-956a-7d8ebf2f28de", "record_id": "flaws_cloudtrail:0000378:351c05bb-48e0-4317-956a-7d8ebf2f28de", "row_index": 378, "timestamp": "2017-05-26T22:47:00Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI0MDQM9GGP2SN78I", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1006, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "351c05bb-48e0-4317-956a-7d8ebf2f28de", "eventTime": "2017-05-26T22:47:00Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI0MDQM9GGP2SN78I", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:48Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb0c5e77-2a7d-423c-84bc-9fd7c0e3e0a3", "record_id": "flaws_cloudtrail:0000379:cb0c5e77-2a7d-423c-84bc-9fd7c0e3e0a3", "row_index": 379, "timestamp": "2017-05-26T22:47:01Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI0MDQM9GGP2SN78I", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb0c5e77-2a7d-423c-84bc-9fd7c0e3e0a3", "eventTime": "2017-05-26T22:47:01Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI0MDQM9GGP2SN78I", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:48Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "383a8687-1194-462b-8dec-93231f904687", "record_id": "flaws_cloudtrail:0000380:383a8687-1194-462b-8dec-93231f904687", "row_index": 380, "timestamp": "2017-05-26T22:47:01Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAI0MDQM9GGP2SN78I", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "383a8687-1194-462b-8dec-93231f904687", "eventTime": "2017-05-26T22:47:01Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAI0MDQM9GGP2SN78I", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:46:48Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1d478398-8a5b-43cf-b081-06215d1058bb", "record_id": "flaws_cloudtrail:0000381:d1d478398-8a5b-43cf-b081-06215d1058bb", "row_index": 381, "timestamp": "2017-05-26T22:47:02Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1455, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1d478398-8a5b-43cf-b081-06215d1058bb", "eventTime": "2017-05-26T22:47:02Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIARE7TA064P46GQEE9", "expiration": "May 26, 2017 11:47:02 PM", "sessionToken": "FQoDYXdzECAaDA7OgjG3c8id0G4ulyLMATHEjyMWxawy9ZELW2lvvbR4cr2k0FomxSrNym3p6TPFHzlGwXfSWhBijYGRcsVi+MEUufxt7xv9DSMH8f31S/dAKDLKQkpbaW/ct8UDkdn+pJQhQjbb5lIWWNPjJkNL72wLYEZnyo5OCG1kc1ucvZKm2GOSAxOSa6e3Se1hgyMVr8e9iW5EKNWuucAIlATKom5D6Ox9CroLi2bRhLouWGa8M3vO5pR/hZNO6Ilmqb9/e5qTD9jLjL3GVJpGL1koFoM4SC/bXBqdq0dP3ijm4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b99602-c212-4541-9646-eb8064a13767", "record_id": "flaws_cloudtrail:0000382:2b99602-c212-4541-9646-eb8064a13767", "row_index": 382, "timestamp": "2017-05-26T22:47:03Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIARE7TA064P46GQEE9", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1012, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b99602-c212-4541-9646-eb8064a13767", "eventTime": "2017-05-26T22:47:03Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIARE7TA064P46GQEE9", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "724563-3fb3-4b51-b8e6-8ad64358f8c", "record_id": "flaws_cloudtrail:0000383:724563-3fb3-4b51-b8e6-8ad64358f8c", "row_index": 383, "timestamp": "2017-05-26T22:47:04Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIARE7TA064P46GQEE9", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1010, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "724563-3fb3-4b51-b8e6-8ad64358f8c", "eventTime": "2017-05-26T22:47:04Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIARE7TA064P46GQEE9", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6330ff4-971e-4ae0-a276-e24d22cac052", "record_id": "flaws_cloudtrail:0000384:e6330ff4-971e-4ae0-a276-e24d22cac052", "row_index": 384, "timestamp": "2017-05-26T22:47:06Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIARE7TA064P46GQEE9", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1009, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6330ff4-971e-4ae0-a276-e24d22cac052", "eventTime": "2017-05-26T22:47:06Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIARE7TA064P46GQEE9", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8eccc91-999a-4862-acc6-f517142eeed", "record_id": "flaws_cloudtrail:0000385:c8eccc91-999a-4862-acc6-f517142eeed", "row_index": 385, "timestamp": "2017-05-26T22:47:07Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIARE7TA064P46GQEE9", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1012, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8eccc91-999a-4862-acc6-f517142eeed", "eventTime": "2017-05-26T22:47:07Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIARE7TA064P46GQEE9", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f4d7cd7-eeff-4a28-af0f-30f9459a6257", "record_id": "flaws_cloudtrail:0000386:5f4d7cd7-eeff-4a28-af0f-30f9459a6257", "row_index": 386, "timestamp": "2017-05-26T22:47:08Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIARE7TA064P46GQEE9", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1013, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f4d7cd7-eeff-4a28-af0f-30f9459a6257", "eventTime": "2017-05-26T22:47:08Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIARE7TA064P46GQEE9", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07223f-b8f4-4f73-8e90-b4f68117", "record_id": "flaws_cloudtrail:0000387:07223f-b8f4-4f73-8e90-b4f68117", "row_index": 387, "timestamp": "2017-05-26T22:47:09Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIARE7TA064P46GQEE9", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1005, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07223f-b8f4-4f73-8e90-b4f68117", "eventTime": "2017-05-26T22:47:09Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIARE7TA064P46GQEE9", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8e487a2-d543-46b4-8daa-3bd019f6cac7", "record_id": "flaws_cloudtrail:0000388:c8e487a2-d543-46b4-8daa-3bd019f6cac7", "row_index": 388, "timestamp": "2017-05-26T22:47:10Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIARE7TA064P46GQEE9", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1011, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8e487a2-d543-46b4-8daa-3bd019f6cac7", "eventTime": "2017-05-26T22:47:10Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIARE7TA064P46GQEE9", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37b984b8-d564-4988-9e55-c64aa779511b", "record_id": "flaws_cloudtrail:0000389:37b984b8-d564-4988-9e55-c64aa779511b", "row_index": 389, "timestamp": "2017-05-26T22:47:11Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIARE7TA064P46GQEE9", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1006, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37b984b8-d564-4988-9e55-c64aa779511b", "eventTime": "2017-05-26T22:47:11Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIARE7TA064P46GQEE9", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a76566c7-a3c4-4a67-9ff7-92fb830ff5c4", "record_id": "flaws_cloudtrail:0000390:a76566c7-a3c4-4a67-9ff7-92fb830ff5c4", "row_index": 390, "timestamp": "2017-05-26T22:47:12Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIARE7TA064P46GQEE9", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a76566c7-a3c4-4a67-9ff7-92fb830ff5c4", "eventTime": "2017-05-26T22:47:12Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIARE7TA064P46GQEE9", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "272333a24-640b-4d72-a298-5807ddb95d87", "record_id": "flaws_cloudtrail:0000391:272333a24-640b-4d72-a298-5807ddb95d87", "row_index": 391, "timestamp": "2017-05-26T22:47:13Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIARE7TA064P46GQEE9", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1007, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "272333a24-640b-4d72-a298-5807ddb95d87", "eventTime": "2017-05-26T22:47:13Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIARE7TA064P46GQEE9", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "432d307e-a0ff-4e53-80bc-6813b1733268", "record_id": "flaws_cloudtrail:0000392:432d307e-a0ff-4e53-80bc-6813b1733268", "row_index": 392, "timestamp": "2017-05-26T22:47:13Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIARE7TA064P46GQEE9", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "432d307e-a0ff-4e53-80bc-6813b1733268", "eventTime": "2017-05-26T22:47:13Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIARE7TA064P46GQEE9", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46e57f14-9148-4439-be9b-858d386ab327", "record_id": "flaws_cloudtrail:0000393:46e57f14-9148-4439-be9b-858d386ab327", "row_index": 393, "timestamp": "2017-05-26T22:47:14Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIARE7TA064P46GQEE9", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46e57f14-9148-4439-be9b-858d386ab327", "eventTime": "2017-05-26T22:47:14Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIARE7TA064P46GQEE9", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0cb7cab-96f8-45e7-a658-eb550877e17b", "record_id": "flaws_cloudtrail:0000394:e0cb7cab-96f8-45e7-a658-eb550877e17b", "row_index": 394, "timestamp": "2017-05-26T22:47:14Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIARE7TA064P46GQEE9", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1007, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0cb7cab-96f8-45e7-a658-eb550877e17b", "eventTime": "2017-05-26T22:47:14Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIARE7TA064P46GQEE9", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82693-c93a-4b35-88fa-c14c5690cf66", "record_id": "flaws_cloudtrail:0000395:82693-c93a-4b35-88fa-c14c5690cf66", "row_index": 395, "timestamp": "2017-05-26T22:47:15Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIARE7TA064P46GQEE9", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1005, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82693-c93a-4b35-88fa-c14c5690cf66", "eventTime": "2017-05-26T22:47:15Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIARE7TA064P46GQEE9", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fe80b63-8e9a-4aaa-8bc7-e63484c69efa", "record_id": "flaws_cloudtrail:0000396:1fe80b63-8e9a-4aaa-8bc7-e63484c69efa", "row_index": 396, "timestamp": "2017-05-26T22:47:16Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fe80b63-8e9a-4aaa-8bc7-e63484c69efa", "eventTime": "2017-05-26T22:47:16Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIALPB3ZOJ2ZQQ6WOA2", "expiration": "May 26, 2017 11:47:16 PM", "sessionToken": "FQoDYXdzECAaDPZQwrXyn8DanG7Q+iLMAdPAjW5cjCGh8qmXKslgD8g7WQPk62JCJ+o2U1jdi2E+MWBPjIbMVljSbWNRkq50MLpXSb1thRCkd6K50fcwBO5nN69sl/QFGHsMLFIJMrvvnzOhWF2Pkad3MpgEWjeQR5kwurUaaFhARBRI5AGqYirfbmmXRJcIGDlItD19FJiK1fZVK2ZTejLQ1g43B7U1rpxOhmj1My02nTNGvidExIz5Wbkw0N7/qtIi5D9F5xYEYOCTzXykRJiSqM8JVTa270DkZ2ZdtmyURaj1hCj04KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3bac2f3b-4c59-49f0-b43e-33257ab2d983", "record_id": "flaws_cloudtrail:0000397:3bac2f3b-4c59-49f0-b43e-33257ab2d983", "row_index": 397, "timestamp": "2017-05-26T22:47:16Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIALPB3ZOJ2ZQQ6WOA2", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1005, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3bac2f3b-4c59-49f0-b43e-33257ab2d983", "eventTime": "2017-05-26T22:47:16Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIALPB3ZOJ2ZQQ6WOA2", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:16Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c6495af-0b28-4f7e-91aa-0368c28181a6", "record_id": "flaws_cloudtrail:0000398:8c6495af-0b28-4f7e-91aa-0368c28181a6", "row_index": 398, "timestamp": "2017-05-26T22:47:17Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c6495af-0b28-4f7e-91aa-0368c28181a6", "eventTime": "2017-05-26T22:47:17Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA95OC71B4R6DTRSGA", "expiration": "May 26, 2017 11:47:17 PM", "sessionToken": "FQoDYXdzECAaDFgEc9V1RxhT3dKh7SLMAYZqJvU7R5Z7O3uZ+rVVEOYUdHsAa3WXkWEk/TWaVQEBXMH+ixpKqG0O++5GkDe9nmbpW3sa2+z5MQ8X8Bm+U2IVd4ro0iaPnT7uCLQ6Ca+zVsz3Utg93OFX1FWrlzY2luB/VTXuA7P0AxQmWYsiz/gq8ZmaCLQlAtd49F+lVV1AlmsBbkUONQ0gf0gczwhZhwEMbrOKxZlP3qyWgLVXejcs6M/pO0kvRRRYWwNByz90+T4XfRQFVFw3oZRfL/MBJi+K5Jskr/c/QNmRsCj14KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96f073ed-132b-4847-89b4-7ec77818a4f5", "record_id": "flaws_cloudtrail:0000399:96f073ed-132b-4847-89b4-7ec77818a4f5", "row_index": 399, "timestamp": "2017-05-26T22:47:17Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA95OC71B4R6DTRSGA", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1006, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96f073ed-132b-4847-89b4-7ec77818a4f5", "eventTime": "2017-05-26T22:47:17Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA95OC71B4R6DTRSGA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:17Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c56d51cb-1eb2-4ce0-aa92-74ed4ec80bee", "record_id": "flaws_cloudtrail:0000400:c56d51cb-1eb2-4ce0-aa92-74ed4ec80bee", "row_index": 400, "timestamp": "2017-05-26T22:47:18Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1455, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c56d51cb-1eb2-4ce0-aa92-74ed4ec80bee", "eventTime": "2017-05-26T22:47:18Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAEP78X2S37WFX9GIU", "expiration": "May 26, 2017 11:47:18 PM", "sessionToken": "FQoDYXdzECAaDAHVooi8kxI/FAavUiLMAYtcv9oGu0C9e7fsu67aQSjy14Bnz0F+WNKIBWs2sZU6IJXlIrDsT+AXUySaMIn5bDO+gI/RPOfnTSuTQooZJTAiVdpOjL7UhyTIGucbsY+I3ScAFBJLuw2q/ZET3yIaWSvTTWwsGDgnm0YUBzxs/fTZiRdrFi6ZHF4UCr6OF4EmWEa5pJ/4X08TDRMR+OAIGb9GFxQFBy2lVDSSFqVjr7mOjoq3XWGLpYaLCrOMIpgNjC9PVjkZyVq5ycB9T+esm3BLuA1quZKrBYRAUCj24KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89ac599c-82e6-4ca5-baa5-796631c01", "record_id": "flaws_cloudtrail:0000401:89ac599c-82e6-4ca5-baa5-796631c01", "row_index": 401, "timestamp": "2017-05-26T22:47:19Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAEP78X2S37WFX9GIU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89ac599c-82e6-4ca5-baa5-796631c01", "eventTime": "2017-05-26T22:47:19Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAEP78X2S37WFX9GIU", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:18Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efabaf39-a52f-493e-9b1f-51680caa76c5", "record_id": "flaws_cloudtrail:0000402:efabaf39-a52f-493e-9b1f-51680caa76c5", "row_index": 402, "timestamp": "2017-05-26T22:47:19Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efabaf39-a52f-493e-9b1f-51680caa76c5", "eventTime": "2017-05-26T22:47:19Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAE92A43V2MRJ09OOX", "expiration": "May 26, 2017 11:47:19 PM", "sessionToken": "FQoDYXdzECAaDHiokl6fXCDVuGczMCLMAUJlUzyyMXep5I5YT2UNEIRp8ejyQPaucsnvvUN32hirT1ocHsgVinp+KpU4gY1eWIfkXYCOow9E+wRpBD4zCwTX9CJiF3/99OuCrlAdocdQwCv5e/8X56jhv4MHx0MdNEV/8Hj65H4mM5X3jWdCpMOKMPfrXrWmZLduFNNoxLPX4B7SeUu33/Cui0PYSJmS6dFGbarkoDAYcUs6icZITMeTmnvqJhBE850hsx/eq2yAG99hmB/VaLWCqasBXh08dX1ACLwN8KmmyLZpRyj34KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "506dea82-99a0-4417-807a-0f806426a25b", "record_id": "flaws_cloudtrail:0000403:506dea82-99a0-4417-807a-0f806426a25b", "row_index": 403, "timestamp": "2017-05-26T22:47:21Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAE92A43V2MRJ09OOX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1011, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "506dea82-99a0-4417-807a-0f806426a25b", "eventTime": "2017-05-26T22:47:21Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAE92A43V2MRJ09OOX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "314cfa95-cc07-4862-8d32-dda808132b6", "record_id": "flaws_cloudtrail:0000404:314cfa95-cc07-4862-8d32-dda808132b6", "row_index": 404, "timestamp": "2017-05-26T22:47:21Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1449, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "314cfa95-cc07-4862-8d32-dda808132b6", "eventTime": "2017-05-26T22:47:21Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAYRVWEW9FD1Y3VSH9", "expiration": "May 26, 2017 11:47:21 PM", "sessionToken": "FQoDYXdzECAaDBtFeWNFAVwooUzjnSLMARRkABRNbJRjoIujb5XIhb+WVgIzoFEcop/Jyuc5twGth2RmB0WhsvV7llGUrJeVx0Nnrzf3nBeqiuDTEslSvECqevgH2HgetASR9yEygCAv7dfFO237Oe1s5winYbE9yyAeFDltmxGW34vbIPZBKiX5ssHdyffKF1DK3+knjwXSRWwwEQWl8P34WoR3kw4LFbiZASlqM9VGKYZ5dTblg1AEXyC1Y2TNNtxJyGpYfXr3x7PSS2mFBZHGbVAOuYEbCfU6Su2QnMu1KeSqHij54KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5d47322-1e81-44b2-8494-598772d6c377", "record_id": "flaws_cloudtrail:0000405:e5d47322-1e81-44b2-8494-598772d6c377", "row_index": 405, "timestamp": "2017-05-26T22:47:22Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAYRVWEW9FD1Y3VSH9", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1006, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5d47322-1e81-44b2-8494-598772d6c377", "eventTime": "2017-05-26T22:47:22Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAYRVWEW9FD1Y3VSH9", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:21Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b39180-884d-4080-9603-92b80a372f08", "record_id": "flaws_cloudtrail:0000406:b39180-884d-4080-9603-92b80a372f08", "row_index": 406, "timestamp": "2017-05-26T22:47:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b39180-884d-4080-9603-92b80a372f08", "eventTime": "2017-05-26T22:47:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIARELRFCOU9JCVU0BO", "expiration": "May 26, 2017 11:47:22 PM", "sessionToken": "FQoDYXdzECAaDG/QnmI/ZpoQu/soCCLMAQI0FQm05zwcvF0Q353Fvfs5J3iUu6INxREnsFsoaWKPO3XhxrXyAoimLx19dhuMkUXMlIAIiwvPLXVocfWiJi70F6oYfm+B8+DgHIeLbT8LLVSaztEyaumrDq8psKyiGl7OzDhVUsPM7bYMq4xBLU2/OtJg5d5qcgtkl1NlrmJylnkAHMEQE/9mabXxYrXIo2rLE7ElfguV0jEdvDQPj5vJnsbhvE3PUeSxaQ5ymHjoqI1cFIPPNFq7UDl5Pc61uoG+OgFX+jyWXSTPiij64KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac201a26-93d8-4abb-a364-a13af66acb99", "record_id": "flaws_cloudtrail:0000407:ac201a26-93d8-4abb-a364-a13af66acb99", "row_index": 407, "timestamp": "2017-05-26T22:47:24Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIARELRFCOU9JCVU0BO", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1012, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac201a26-93d8-4abb-a364-a13af66acb99", "eventTime": "2017-05-26T22:47:24Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIARELRFCOU9JCVU0BO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:22Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "736cb25b-c1eb-4a52-a522-a31e08c8ff20", "record_id": "flaws_cloudtrail:0000408:736cb25b-c1eb-4a52-a522-a31e08c8ff20", "row_index": 408, "timestamp": "2017-05-26T22:47:24Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1449, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "736cb25b-c1eb-4a52-a522-a31e08c8ff20", "eventTime": "2017-05-26T22:47:24Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAU10S90LVVWAHCAA6", "expiration": "May 26, 2017 11:47:24 PM", "sessionToken": "FQoDYXdzECAaDPPY8RnGGFOwiGEc3CLMAV7Rox1n8m0XXHKz6bGRvCDQ29n5sAdsSIOQ5w9nFr72VO8AC0rZoUCXheALfUeQor5la8TfhsGIVbwHwfcdgajjF52ONpWKBxeBJ9ErgRH9VKO4apr8LmhF9vAo2FzvpBBQ2HVKoufVyDTuXfa/P0Z4h5Z2lSwLFXqVlzibQk3sD999uWS/hlDqnOFD4LkOnCqjInYkVdxalCjyRrF1fGj+Z8yeWXO9VaJmV1FTCRbNSJG+/qzbe1rPOUBmbU0IUdhg8J/baDNcLB2XuSj84KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f930af41-e9cb-4299-9a02-61edf9d36716", "record_id": "flaws_cloudtrail:0000409:f930af41-e9cb-4299-9a02-61edf9d36716", "row_index": 409, "timestamp": "2017-05-26T22:47:24Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAU10S90LVVWAHCAA6", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1006, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f930af41-e9cb-4299-9a02-61edf9d36716", "eventTime": "2017-05-26T22:47:24Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAU10S90LVVWAHCAA6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:24Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf0b5008-d107-4134-9c74-85c664b760ec", "record_id": "flaws_cloudtrail:0000410:cf0b5008-d107-4134-9c74-85c664b760ec", "row_index": 410, "timestamp": "2017-05-26T22:47:25Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1455, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf0b5008-d107-4134-9c74-85c664b760ec", "eventTime": "2017-05-26T22:47:25Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA5UTLJG2Q94QTKJXC", "expiration": "May 26, 2017 11:47:25 PM", "sessionToken": "FQoDYXdzECAaDDYri6VlvrnBcQwHQSLMAfuLEQ6hEVe01qJejekSo+hr4YeFcMZX0RyuG22DQH1XXJajd0wUDk0o96VUTwGDa3Rrm7vPTpKQU9uL6eS36YrrYYmaxH9u3tMKC+WTVoS/xW1SQIeuUM3KfgadUmIpZSxWofrpcXC03qOCQS7radGrsuxpE0ca2YZi0j7KQbm8m3QZT3YGWussW0ukeTmzXDuTE0yitkLZDNb2C12KnK6Aik9ozvdfWWcQcqJ6E0X9nIRc2M6nmD5B6Tbs8bFtI1tWSmbUpH1G4BHw6ij94KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df472c27-a441-45a3-b5a4-0eb116df40f4", "record_id": "flaws_cloudtrail:0000411:df472c27-a441-45a3-b5a4-0eb116df40f4", "row_index": 411, "timestamp": "2017-05-26T22:47:26Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA5UTLJG2Q94QTKJXC", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1011, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df472c27-a441-45a3-b5a4-0eb116df40f4", "eventTime": "2017-05-26T22:47:26Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA5UTLJG2Q94QTKJXC", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7499b539-a117-4ebb-83b2-58533cab4d3c", "record_id": "flaws_cloudtrail:0000412:7499b539-a117-4ebb-83b2-58533cab4d3c", "row_index": 412, "timestamp": "2017-05-26T22:47:26Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1455, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7499b539-a117-4ebb-83b2-58533cab4d3c", "eventTime": "2017-05-26T22:47:26Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA9KDGTFO26B690ICR", "expiration": "May 26, 2017 11:47:26 PM", "sessionToken": "FQoDYXdzECAaDEsVElH1UcPLuVyzjiLMAcUnT4GvlZiZcgi1etTiqLMgSjisYunkc+w6GjoHFF+C4FNS/M0J2IhTm/bEweibnXT8CpS3mLsfaJ8F0VKpSH9hieoIFIxt9kYyzx8DKbZPbzUJMiqtI4VAn88ox0IvF91hXbB+XYsjrALZ1It4X7BV1I+izsPuWPwJR9B3uowt4FerxC3SiDMsENjiriYFgPFKnr79vqgTi9LvY7MSrd36PWlfYZiOxa5w8AHoNsCzqxZ/z7fMRaYSkFz8r4sl84ARGCUzPFb0ABp6Zij+4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92948aee-ed52-458f-9011-d7d19065e9f", "record_id": "flaws_cloudtrail:0000413:92948aee-ed52-458f-9011-d7d19065e9f", "row_index": 413, "timestamp": "2017-05-26T22:47:27Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA9KDGTFO26B690ICR", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92948aee-ed52-458f-9011-d7d19065e9f", "eventTime": "2017-05-26T22:47:27Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA9KDGTFO26B690ICR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:26Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52a11a4d-abf0-41ca-90f4-ec05d45df56b", "record_id": "flaws_cloudtrail:0000414:52a11a4d-abf0-41ca-90f4-ec05d45df56b", "row_index": 414, "timestamp": "2017-05-26T22:47:27Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52a11a4d-abf0-41ca-90f4-ec05d45df56b", "eventTime": "2017-05-26T22:47:27Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAQMY5VT7B0QKHEYM3", "expiration": "May 26, 2017 11:47:27 PM", "sessionToken": "FQoDYXdzECAaDGToZLkNJzKeak+f9CLMAdDQZdaLFwIiCkpYxrTiEaEqYGFGj26DvWo0//G39frsQXsl1PRDNCg/INlP/AeMEblDYVXOZN5i47Djb+ZMj05jHw6OgtGOYn9cwNE7qNnPjFJR+bgdr42m8cUyzIlOXVI77mxBVX5tskdMkWPhHH2XbQTsBS9LPOMVab6h7wWr6XsoJi6rzMth89yO+HALJ3kvIzYUWu/s8Hb5fY9J09QuWiQ1ygjcCywDiuPLTqym5CU1xVGmUbdZKoRjw2q7ANHjMOM6RKXDlYMBBSj/4KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "774fc56a-52be-4f88-9add-4427ddb7f730", "record_id": "flaws_cloudtrail:0000415:774fc56a-52be-4f88-9add-4427ddb7f730", "row_index": 415, "timestamp": "2017-05-26T22:47:29Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "774fc56a-52be-4f88-9add-4427ddb7f730", "eventTime": "2017-05-26T22:47:29Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAAOPQIWBD7LI3UGIA", "expiration": "May 26, 2017 11:47:29 PM", "sessionToken": "FQoDYXdzECAaDGqR8P3QKK+Ln1HUhiLMAQzDtV69VJs0R3Cn+ejlKVrrNK50gR/4FAScny7JlYtDXuChtaCuuESyRFN2Nqq2aJFg3kQVqTO6N/en7Pkd0WJkUl5zKsYMa2g6eFtSdNihTt5Eai1fz7sZ/HZwWfjVpoos1G7BYvmKtXhKVQ5jLC+EHK8oMpWsxrec1MGEDAgZJ7OWNx7GTZQwFLlTKqAL0QBS7hrwevkbKUFvqm+hcmFwqSeT+0iTCVvCTaDmLF9+igdZBF5fM05FtE64b0EPRlxULot56eqDZ17pYyiB4aLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cfb7c851-36fe-4742-85fd-777f02f16765", "record_id": "flaws_cloudtrail:0000416:cfb7c851-36fe-4742-85fd-777f02f16765", "row_index": 416, "timestamp": "2017-05-26T22:47:30Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1449, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cfb7c851-36fe-4742-85fd-777f02f16765", "eventTime": "2017-05-26T22:47:30Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAYEIXFVYLK4AKUHVR", "expiration": "May 26, 2017 11:47:30 PM", "sessionToken": "FQoDYXdzECAaDDeYRV8noBODCplXMCLMAYjFgQlgyPlg+SZ0pO19u296GudhClHG56yBJKeCz9Es6wzF6PaqNL480x5JDOaAVQyNs1Kyu/LuMvKIrLnocGezjSa08XDR+/NTIsKsZ6IPL8MI2QeOoAB2Eff8FP/dxd6y4M9I1X3I+Ab/kLkLUc0XP77L/Z4UFEFP3oSuMa93ERlZMXm8D5pJN9RhVCVB5GM/+lGoay/pdR5lo4rPkyUaaS1lpKHI6KApXKzcbVXetL+17Fn9G6GtGXsjr6fnAtM79WxrWa01onDkySiC4aLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63cbf49a-7310-4e6c-8589-f40bc202231f9", "record_id": "flaws_cloudtrail:0000417:63cbf49a-7310-4e6c-8589-f40bc202231f9", "row_index": 417, "timestamp": "2017-05-26T22:47:30Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAAOPQIWBD7LI3UGIA", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1007, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63cbf49a-7310-4e6c-8589-f40bc202231f9", "eventTime": "2017-05-26T22:47:30Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAAOPQIWBD7LI3UGIA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:29Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5fd3b56-ea37-4d60-a432-799fd0c99cf1", "record_id": "flaws_cloudtrail:0000418:a5fd3b56-ea37-4d60-a432-799fd0c99cf1", "row_index": 418, "timestamp": "2017-05-26T22:47:31Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5fd3b56-ea37-4d60-a432-799fd0c99cf1", "eventTime": "2017-05-26T22:47:31Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAN2PKNXF2JWNELIBK", "expiration": "May 26, 2017 11:47:31 PM", "sessionToken": "FQoDYXdzECAaDB4kw3uiQA7avc5wCiLMAXimo80ogytNnmSiTAmalkFmF887i0+lQ0me4ACHT0/mkKljtT86qb3QdZTos5FvvnBgFC+/XhJa/816Bo7Bo94nXVF8bsUNnpxgkwdKYwGCp4T/qywAIsor4NhNFH2DWmwN0RG2IcmvvlJM7mUEpAnWNctXJbw9w+FDmpaKapzZkEp3ke5uSLwD/UlSnTxHPS31fTs6adeQ1PBWOYIUid27F9tdrKn/8FAsDz2HMH+p7NLIAvNbZc5ZIb5B/xdRsbtxNPQ2xafCUJ1FEiiD4aLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff7484c5-781f-45d8-9c40-ee3a7d901373", "record_id": "flaws_cloudtrail:0000419:ff7484c5-781f-45d8-9c40-ee3a7d901373", "row_index": 419, "timestamp": "2017-05-26T22:47:32Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAN2PKNXF2JWNELIBK", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1007, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff7484c5-781f-45d8-9c40-ee3a7d901373", "eventTime": "2017-05-26T22:47:32Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAN2PKNXF2JWNELIBK", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:31Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b364b111-abcd-4ced-ace1-56a9338d7af6", "record_id": "flaws_cloudtrail:0000420:b364b111-abcd-4ced-ace1-56a9338d7af6", "row_index": 420, "timestamp": "2017-05-26T22:47:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b364b111-abcd-4ced-ace1-56a9338d7af6", "eventTime": "2017-05-26T22:47:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAU94PBMT17I9IJFS0", "expiration": "May 26, 2017 11:47:33 PM", "sessionToken": "FQoDYXdzECAaDA/kkmH/nSNZVK3TxSLMATRg7+ezk2oQDdgUoxORmp9aUCF/BTVOHIqWQbd1x2ZVMM43FFVPZ73c0n2p8B3fOM124YHBCpKtvGjoL1tLGfBhMJBhmSIyoh2a3rr3tjKcxGAcp48JfUd4Tvja4wOv+a7M9atcujN9i2FetrDlhXzXugFcpLfyKt7WQr5hxPGVUFhEEoQccnExGL8bnwJ/LjWp1doRNLPktvcSh3+uv/QD3xNy23rxdBsdRUNh4IJnNHoAK9hurdAARWTgFuRhUfB0opxjdlugcMGPiiiF4aLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4fc94f47-ca6b-4fa9-bfe5-892c184c814e", "record_id": "flaws_cloudtrail:0000421:4fc94f47-ca6b-4fa9-bfe5-892c184c814e", "row_index": 421, "timestamp": "2017-05-26T22:47:34Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAU94PBMT17I9IJFS0", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1009, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4fc94f47-ca6b-4fa9-bfe5-892c184c814e", "eventTime": "2017-05-26T22:47:34Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAU94PBMT17I9IJFS0", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:33Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "207901ea7-a713-4025-acdb-8394cbeb9073", "record_id": "flaws_cloudtrail:0000422:207901ea7-a713-4025-acdb-8394cbeb9073", "row_index": 422, "timestamp": "2017-05-26T22:47:34Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1456, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "207901ea7-a713-4025-acdb-8394cbeb9073", "eventTime": "2017-05-26T22:47:34Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAB8TYSCQ1ZC2XT86M", "expiration": "May 26, 2017 11:47:34 PM", "sessionToken": "FQoDYXdzECAaDHEVhE3RfJPEmAnadyLMAYhMsEGpipQkJqNiajaow305U2c8wPV29N0stmblLzpE1oeq6lJTzxiV6qZU0GbGebEF6tgEFbZzomyrI3i0sSqcbnaQqyt2uh9jpNyr82jDkLv63WiGuXSHL+cdaKErbQHrj0QhvaWBcoyPVHf/Jw4Der44TreCX9OqOMPxKNdfR6gPGuGQUC1FA7VvjQmCXYB96i8ioGrh0Qlux6OPzdoB5D64u2qBH/ev5qPMpmyJBMgQqxHOQna8N+dw+wNy9788AK3Zwmgnlhf3FSiG4aLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c1c2014-3967-4a9b-b07d-9e0e19932a64", "record_id": "flaws_cloudtrail:0000423:3c1c2014-3967-4a9b-b07d-9e0e19932a64", "row_index": 423, "timestamp": "2017-05-26T22:47:35Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAB8TYSCQ1ZC2XT86M", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1006, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c1c2014-3967-4a9b-b07d-9e0e19932a64", "eventTime": "2017-05-26T22:47:35Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAB8TYSCQ1ZC2XT86M", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:34Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a53831bc-61a6-48cc-902f-981fba01d256", "record_id": "flaws_cloudtrail:0000424:a53831bc-61a6-48cc-902f-981fba01d256", "row_index": 424, "timestamp": "2017-05-26T22:47:35Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1455, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a53831bc-61a6-48cc-902f-981fba01d256", "eventTime": "2017-05-26T22:47:35Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA5G51S9VFI9LQAI2Z", "expiration": "May 26, 2017 11:47:35 PM", "sessionToken": "FQoDYXdzECAaDHJZUJ/Do+aSX1qEoiLMAcDgK92zXvwEfn7htoPGZBa96c7sRWbwzwtuRYf/UH5ZBoC0He1O2JPwkfOUSGJtmgZvO+NdVMWn9Ejrs/A37Nq8xc5haWpghnQNpgNCRllohxoU8QeQ8/30SwexROOhFX1hcr3WoMGxKcW/iVWsd/POKZS54h4RiOYU9g392aMvW6oy1ZY0I9+EBiwyLZ4XFvFx0xP0zzVa3Fj1aIwlu/0nSJu7/AEvDmH2eH8CmLjX3sHi4WkWzQaMe+xPQn05whcMaPkkQXW1RhNCYCiH4aLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2bb2a9fe-6db7-4fb2-bf69-1c13b9d0e902", "record_id": "flaws_cloudtrail:0000425:2bb2a9fe-6db7-4fb2-bf69-1c13b9d0e902", "row_index": 425, "timestamp": "2017-05-26T22:47:36Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA5G51S9VFI9LQAI2Z", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1006, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2bb2a9fe-6db7-4fb2-bf69-1c13b9d0e902", "eventTime": "2017-05-26T22:47:36Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA5G51S9VFI9LQAI2Z", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:35Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6adc008e-09ac-4dab-84e6-e92148fb", "record_id": "flaws_cloudtrail:0000426:6adc008e-09ac-4dab-84e6-e92148fb", "row_index": 426, "timestamp": "2017-05-26T22:47:37Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1449, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6adc008e-09ac-4dab-84e6-e92148fb", "eventTime": "2017-05-26T22:47:37Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAV8GMIDOA8L7ZJN7B", "expiration": "May 26, 2017 11:47:37 PM", "sessionToken": "FQoDYXdzECAaDDf//0I8VCDoMaUGbiLMAayWlQ6DfCjXnPkkkoss1HriB/wnxbhxv3+p3VCSDF9bqfcla3kDD3VvEVKxNJQ1t81FkdPNoGIA++UFTKZxPKfDIV8gDoZb4yqQdy8RuybBgJTnfhXSzgs0SmvhDH2blXrRC9bKpgD/xQy7xnv7IHSdhIUqla20rS5cJhHnWYiqB2rzgx8eCV7uL6ijMlEWozcanVOF68DccPjItw6+7w/F9QiZDzgZc+04nHZRh5Ttcs0UHl9q6q9muaHPt5f8VTvgIbKWWkcQMP8p9CiJ4aLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "659839e6d-3dc7-43f9-92e4-a867725b56", "record_id": "flaws_cloudtrail:0000427:659839e6d-3dc7-43f9-92e4-a867725b56", "row_index": 427, "timestamp": "2017-05-26T22:47:38Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAV8GMIDOA8L7ZJN7B", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "659839e6d-3dc7-43f9-92e4-a867725b56", "eventTime": "2017-05-26T22:47:38Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAV8GMIDOA8L7ZJN7B", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:37Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d71948-3fd1-4a37-b851-c93f4c16b251", "record_id": "flaws_cloudtrail:0000428:d71948-3fd1-4a37-b851-c93f4c16b251", "row_index": 428, "timestamp": "2017-05-26T22:47:39Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAV8GMIDOA8L7ZJN7B", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d71948-3fd1-4a37-b851-c93f4c16b251", "eventTime": "2017-05-26T22:47:39Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAV8GMIDOA8L7ZJN7B", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:37Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16acffac-fd5c-40f3-9184-0cac93f608a7", "record_id": "flaws_cloudtrail:0000429:16acffac-fd5c-40f3-9184-0cac93f608a7", "row_index": 429, "timestamp": "2017-05-26T22:47:41Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAV8GMIDOA8L7ZJN7B", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16acffac-fd5c-40f3-9184-0cac93f608a7", "eventTime": "2017-05-26T22:47:41Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAV8GMIDOA8L7ZJN7B", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:37Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88e4ed3c-d0d5-490d-b278-e4a56613", "record_id": "flaws_cloudtrail:0000430:88e4ed3c-d0d5-490d-b278-e4a56613", "row_index": 430, "timestamp": "2017-05-26T22:47:42Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAV8GMIDOA8L7ZJN7B", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88e4ed3c-d0d5-490d-b278-e4a56613", "eventTime": "2017-05-26T22:47:42Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAV8GMIDOA8L7ZJN7B", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:37Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "450f5303-abec-435c-aaab-ac22814ff4fc", "record_id": "flaws_cloudtrail:0000431:450f5303-abec-435c-aaab-ac22814ff4fc", "row_index": 431, "timestamp": "2017-05-26T22:47:43Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAV8GMIDOA8L7ZJN7B", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "450f5303-abec-435c-aaab-ac22814ff4fc", "eventTime": "2017-05-26T22:47:43Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAV8GMIDOA8L7ZJN7B", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:37Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d64a1d6-09b6-43d6-acf3-93dc7571a0ce", "record_id": "flaws_cloudtrail:0000432:2d64a1d6-09b6-43d6-acf3-93dc7571a0ce", "row_index": 432, "timestamp": "2017-05-26T22:47:44Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAV8GMIDOA8L7ZJN7B", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d64a1d6-09b6-43d6-acf3-93dc7571a0ce", "eventTime": "2017-05-26T22:47:44Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAV8GMIDOA8L7ZJN7B", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:37Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa80adfb-1fed-4a8f-8513-fbe157ccc3c2", "record_id": "flaws_cloudtrail:0000433:aa80adfb-1fed-4a8f-8513-fbe157ccc3c2", "row_index": 433, "timestamp": "2017-05-26T22:47:45Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAV8GMIDOA8L7ZJN7B", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa80adfb-1fed-4a8f-8513-fbe157ccc3c2", "eventTime": "2017-05-26T22:47:45Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAV8GMIDOA8L7ZJN7B", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:37Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a83b5830-5ce3-41bd-a40c-7225a6a2f6d5", "record_id": "flaws_cloudtrail:0000434:a83b5830-5ce3-41bd-a40c-7225a6a2f6d5", "row_index": 434, "timestamp": "2017-05-26T22:47:45Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAV8GMIDOA8L7ZJN7B", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a83b5830-5ce3-41bd-a40c-7225a6a2f6d5", "eventTime": "2017-05-26T22:47:45Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAV8GMIDOA8L7ZJN7B", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:37Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a857fc4-0f87-463b-8893-a6946a13fa25", "record_id": "flaws_cloudtrail:0000435:7a857fc4-0f87-463b-8893-a6946a13fa25", "row_index": 435, "timestamp": "2017-05-26T22:47:46Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAV8GMIDOA8L7ZJN7B", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a857fc4-0f87-463b-8893-a6946a13fa25", "eventTime": "2017-05-26T22:47:46Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAV8GMIDOA8L7ZJN7B", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:37Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44acff76-5b2d-4386-b130-429820c5da4", "record_id": "flaws_cloudtrail:0000436:44acff76-5b2d-4386-b130-429820c5da4", "row_index": 436, "timestamp": "2017-05-26T22:47:47Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAV8GMIDOA8L7ZJN7B", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44acff76-5b2d-4386-b130-429820c5da4", "eventTime": "2017-05-26T22:47:47Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAV8GMIDOA8L7ZJN7B", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:37Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77e66f28-f57b-4702-a61d-f7b6d50a2828", "record_id": "flaws_cloudtrail:0000437:77e66f28-f57b-4702-a61d-f7b6d50a2828", "row_index": 437, "timestamp": "2017-05-26T22:47:48Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAV8GMIDOA8L7ZJN7B", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77e66f28-f57b-4702-a61d-f7b6d50a2828", "eventTime": "2017-05-26T22:47:48Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAV8GMIDOA8L7ZJN7B", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:37Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4fd701a-7ab3-45f7-b809-16edfbb3ee0a", "record_id": "flaws_cloudtrail:0000438:c4fd701a-7ab3-45f7-b809-16edfbb3ee0a", "row_index": 438, "timestamp": "2017-05-26T22:47:48Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAV8GMIDOA8L7ZJN7B", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4fd701a-7ab3-45f7-b809-16edfbb3ee0a", "eventTime": "2017-05-26T22:47:48Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAV8GMIDOA8L7ZJN7B", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:37Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7078be6-781e-47c8-b46c-8aba96ed82b9", "record_id": "flaws_cloudtrail:0000439:b7078be6-781e-47c8-b46c-8aba96ed82b9", "row_index": 439, "timestamp": "2017-05-26T22:47:49Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAV8GMIDOA8L7ZJN7B", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7078be6-781e-47c8-b46c-8aba96ed82b9", "eventTime": "2017-05-26T22:47:49Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAV8GMIDOA8L7ZJN7B", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:37Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "051d3ff9-dd16-40ee-a633-e9cc02b6a3a5", "record_id": "flaws_cloudtrail:0000440:051d3ff9-dd16-40ee-a633-e9cc02b6a3a5", "row_index": 440, "timestamp": "2017-05-26T22:47:49Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAV8GMIDOA8L7ZJN7B", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "051d3ff9-dd16-40ee-a633-e9cc02b6a3a5", "eventTime": "2017-05-26T22:47:49Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAV8GMIDOA8L7ZJN7B", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:37Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a22c1ab-9b90-46a9-ba3e-eac437cc85b5", "record_id": "flaws_cloudtrail:0000441:9a22c1ab-9b90-46a9-ba3e-eac437cc85b5", "row_index": 441, "timestamp": "2017-05-26T22:47:50Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIARAHY2VPOT0HKH8VW", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a22c1ab-9b90-46a9-ba3e-eac437cc85b5", "eventTime": "2017-05-26T22:47:50Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIARAHY2VPOT0HKH8VW", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:50Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "372a273f-abda-4ce2-afa5-bd8becbe3a68", "record_id": "flaws_cloudtrail:0000442:372a273f-abda-4ce2-afa5-bd8becbe3a68", "row_index": 442, "timestamp": "2017-05-26T22:47:50Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1455, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "372a273f-abda-4ce2-afa5-bd8becbe3a68", "eventTime": "2017-05-26T22:47:50Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIARAHY2VPOT0HKH8VW", "expiration": "May 26, 2017 11:47:50 PM", "sessionToken": "FQoDYXdzECAaDA2Jg7JkCfcA9w58WSLMAWVgA6ZgY6uArh55nLaTUSwu6VdYUCz1iTZZ//LwPjgKtqLXTDPMKaOTY/Hw1Vpvr1XKbecvvKxNExgmmw1BJmXD/4w2n1YUpOWKkoqyCgml/MFVgZcKRqLPsTMuUSa9cpOv4CvA6APOrXa2yPFvHg9JcMUGrnV9/yget41gatAAV2JJoXeeIiO5z/bXyMbU27frXUCzK7o4otjxaW8Ute/fLOgXBbfr90DwzSID7+KO47d2K5WYvXnCMsGFeNFZ1pXw6KdbZ9zqSAPJpiiW4aLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14c93a66-43e5-4caf-9771-80e69a333696", "record_id": "flaws_cloudtrail:0000443:14c93a66-43e5-4caf-9771-80e69a333696", "row_index": 443, "timestamp": "2017-05-26T22:47:51Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIARAHY2VPOT0HKH8VW", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14c93a66-43e5-4caf-9771-80e69a333696", "eventTime": "2017-05-26T22:47:51Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIARAHY2VPOT0HKH8VW", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:50Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f234f639-7693-4730-89b4-7fcbc422afc6", "record_id": "flaws_cloudtrail:0000444:f234f639-7693-4730-89b4-7fcbc422afc6", "row_index": 444, "timestamp": "2017-05-26T22:47:53Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIARAHY2VPOT0HKH8VW", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f234f639-7693-4730-89b4-7fcbc422afc6", "eventTime": "2017-05-26T22:47:53Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIARAHY2VPOT0HKH8VW", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:50Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d921ab5e-34bd-4cbe-931f-bc67fc05b1d0", "record_id": "flaws_cloudtrail:0000445:d921ab5e-34bd-4cbe-931f-bc67fc05b1d0", "row_index": 445, "timestamp": "2017-05-26T22:47:54Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIARAHY2VPOT0HKH8VW", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d921ab5e-34bd-4cbe-931f-bc67fc05b1d0", "eventTime": "2017-05-26T22:47:54Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIARAHY2VPOT0HKH8VW", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:50Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d7c88f7-0e3f-4e10-95a4-8b9364c3e3b3", "record_id": "flaws_cloudtrail:0000446:8d7c88f7-0e3f-4e10-95a4-8b9364c3e3b3", "row_index": 446, "timestamp": "2017-05-26T22:47:55Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIARAHY2VPOT0HKH8VW", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d7c88f7-0e3f-4e10-95a4-8b9364c3e3b3", "eventTime": "2017-05-26T22:47:55Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIARAHY2VPOT0HKH8VW", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:50Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0089f292-5943-45e6-a68d-44aea05b9e92", "record_id": "flaws_cloudtrail:0000447:0089f292-5943-45e6-a68d-44aea05b9e92", "row_index": 447, "timestamp": "2017-05-26T22:47:56Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIARAHY2VPOT0HKH8VW", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 983, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0089f292-5943-45e6-a68d-44aea05b9e92", "eventTime": "2017-05-26T22:47:56Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIARAHY2VPOT0HKH8VW", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:50Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28d6ba52-260d-4714-ba58-18c60fb6b39b", "record_id": "flaws_cloudtrail:0000448:28d6ba52-260d-4714-ba58-18c60fb6b39b", "row_index": 448, "timestamp": "2017-05-26T22:47:57Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIARAHY2VPOT0HKH8VW", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 983, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28d6ba52-260d-4714-ba58-18c60fb6b39b", "eventTime": "2017-05-26T22:47:57Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIARAHY2VPOT0HKH8VW", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:50Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50017ea5-e63f-491e-b150-4d9d75f836a3", "record_id": "flaws_cloudtrail:0000449:50017ea5-e63f-491e-b150-4d9d75f836a3", "row_index": 449, "timestamp": "2017-05-26T22:47:58Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIARAHY2VPOT0HKH8VW", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50017ea5-e63f-491e-b150-4d9d75f836a3", "eventTime": "2017-05-26T22:47:58Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIARAHY2VPOT0HKH8VW", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:50Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06abad0b-1711-424c-b5ba-e6e57d0e031e", "record_id": "flaws_cloudtrail:0000450:06abad0b-1711-424c-b5ba-e6e57d0e031e", "row_index": 450, "timestamp": "2017-05-26T22:47:58Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIARAHY2VPOT0HKH8VW", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06abad0b-1711-424c-b5ba-e6e57d0e031e", "eventTime": "2017-05-26T22:47:58Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIARAHY2VPOT0HKH8VW", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:50Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "295cc22e-5e36-4b8d-867c-647ec21645f6", "record_id": "flaws_cloudtrail:0000451:295cc22e-5e36-4b8d-867c-647ec21645f6", "row_index": 451, "timestamp": "2017-05-26T22:47:59Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIARAHY2VPOT0HKH8VW", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "295cc22e-5e36-4b8d-867c-647ec21645f6", "eventTime": "2017-05-26T22:47:59Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIARAHY2VPOT0HKH8VW", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:50Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "930a7adf-9d47-4ae1-842d-7ec36c031e11", "record_id": "flaws_cloudtrail:0000452:930a7adf-9d47-4ae1-842d-7ec36c031e11", "row_index": 452, "timestamp": "2017-05-26T22:48:00Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIARAHY2VPOT0HKH8VW", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "930a7adf-9d47-4ae1-842d-7ec36c031e11", "eventTime": "2017-05-26T22:48:00Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIARAHY2VPOT0HKH8VW", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:50Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68666c30-8f47-45a3-b048-ecf6a844733f1", "record_id": "flaws_cloudtrail:0000453:68666c30-8f47-45a3-b048-ecf6a844733f1", "row_index": 453, "timestamp": "2017-05-26T22:48:00Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIARAHY2VPOT0HKH8VW", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68666c30-8f47-45a3-b048-ecf6a844733f1", "eventTime": "2017-05-26T22:48:00Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIARAHY2VPOT0HKH8VW", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:50Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea0b7b7a-a440-4f14-8e6b-61d3befc0e48", "record_id": "flaws_cloudtrail:0000454:ea0b7b7a-a440-4f14-8e6b-61d3befc0e48", "row_index": 454, "timestamp": "2017-05-26T22:48:01Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIARAHY2VPOT0HKH8VW", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea0b7b7a-a440-4f14-8e6b-61d3befc0e48", "eventTime": "2017-05-26T22:48:01Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIARAHY2VPOT0HKH8VW", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:50Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "056099ec-1607-4d66-a2d0-95d7f31024", "record_id": "flaws_cloudtrail:0000455:056099ec-1607-4d66-a2d0-95d7f31024", "row_index": 455, "timestamp": "2017-05-26T22:48:01Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIARAHY2VPOT0HKH8VW", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 975, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "056099ec-1607-4d66-a2d0-95d7f31024", "eventTime": "2017-05-26T22:48:01Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIARAHY2VPOT0HKH8VW", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:47:50Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61efe4ca-7ca8-4d01-8a00-6c87f4f9e404", "record_id": "flaws_cloudtrail:0000456:61efe4ca-7ca8-4d01-8a00-6c87f4f9e404", "row_index": 456, "timestamp": "2017-05-26T22:48:02Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1447, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61efe4ca-7ca8-4d01-8a00-6c87f4f9e404", "eventTime": "2017-05-26T22:48:02Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "cloudaux"}, "responseElements": {"credentials": {"accessKeyId": "ASIA7B5XRC2R6HU5RCX8", "expiration": "May 26, 2017 11:48:02 PM", "sessionToken": "FQoDYXdzECAaDEmftMoGJf9QdxBegSLLAZQXgvrAkueBg0XgyuvV5vh/KHssPi8d7nwFFAbAjBek3QIaQNLnp5tNrPR9OB8s1anmcOry/TbuGMW9hQ6l79AnOeazmuaROvhlytPyoWY9L081u9Bv+TA9crNoCPul66S1ZhRP6KkaF38NQ+DnIsz1htXd8HGFFQHaYu+B8iLARaGfLtHip0C+Q8xUshTe6+CNNCMIHk6i67m8ha1emqZ29/r7B79c3cX8zWmbCz/jD2CcWVOQqdtAD8yX5fGH9Egapju8MXjGLuJaKKLhoskF"}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "716b9fb0-ffc9-49e8-8b3b-2ddf212799df", "record_id": "flaws_cloudtrail:0000457:716b9fb0-ffc9-49e8-8b3b-2ddf212799df", "row_index": 457, "timestamp": "2017-05-26T22:48:03Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1447, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "716b9fb0-ffc9-49e8-8b3b-2ddf212799df", "eventTime": "2017-05-26T22:48:03Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "cloudaux"}, "responseElements": {"credentials": {"accessKeyId": "ASIAQJ0RCUSJXW0ZW86I", "expiration": "May 26, 2017 11:48:03 PM", "sessionToken": "FQoDYXdzECAaDMlwskSMXc/McfkyTiLLAXZQprNDa5x/0N880XOeM1PUUIwgZiQ/QAvH0Vk2AbEbd9FBFxXUcwamNfJavEw2BUfNFjBL3tkKnai4nIPZozUrSrg7G/Wv57DKa7RX5/Y1affQvEhbKdSolpTrUqpkR+DgzT2Q57ifooiThMbVQVnyyXtOADns/juLiLNOhE4+Fs+8a43Tu0BCvljNcweCZcF6/xNmetGA+hG326W9MjJ2I/UepsbEBbHJi0dcUv66n3mF5Q3LuEBNQ87pYHj5XMAK6pO/9hxOrHv+KKPhoskF"}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ed202931-fc4a-403f-b3cb-faed401f7f57", "record_id": "flaws_cloudtrail:0000458:7ed202931-fc4a-403f-b3cb-faed401f7f57", "row_index": 458, "timestamp": "2017-05-26T22:48:03Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA7B5XRC2R6HU5RCX8", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1033, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ed202931-fc4a-403f-b3cb-faed401f7f57", "eventTime": "2017-05-26T22:48:03Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA7B5XRC2R6HU5RCX8", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "baeaf86a-1d15-420e-8512-c8f3001af536", "record_id": "flaws_cloudtrail:0000459:baeaf86a-1d15-420e-8512-c8f3001af536", "row_index": 459, "timestamp": "2017-05-26T22:48:03Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA7B5XRC2R6HU5RCX8", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 946, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "baeaf86a-1d15-420e-8512-c8f3001af536", "eventTime": "2017-05-26T22:48:03Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA7B5XRC2R6HU5RCX8", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5c7c4cd-0b10-43e6-acc7-e26538a1c7f4", "record_id": "flaws_cloudtrail:0000460:a5c7c4cd-0b10-43e6-acc7-e26538a1c7f4", "row_index": 460, "timestamp": "2017-05-26T22:48:03Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA7B5XRC2R6HU5RCX8", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 991, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5c7c4cd-0b10-43e6-acc7-e26538a1c7f4", "eventTime": "2017-05-26T22:48:03Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA7B5XRC2R6HU5RCX8", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b30f517f-4ae0-4c08-8eb3-52a890ee5738", "record_id": "flaws_cloudtrail:0000461:b30f517f-4ae0-4c08-8eb3-52a890ee5738", "row_index": 461, "timestamp": "2017-05-26T22:48:03Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAQJ0RCUSJXW0ZW86I", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b30f517f-4ae0-4c08-8eb3-52a890ee5738", "eventTime": "2017-05-26T22:48:03Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAQJ0RCUSJXW0ZW86I", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8cf06ecb-0e41-46d3-aaf3-258d545e9138", "record_id": "flaws_cloudtrail:0000462:8cf06ecb-0e41-46d3-aaf3-258d545e9138", "row_index": 462, "timestamp": "2017-05-26T22:48:04Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA7B5XRC2R6HU5RCX8", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 989, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8cf06ecb-0e41-46d3-aaf3-258d545e9138", "eventTime": "2017-05-26T22:48:04Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA7B5XRC2R6HU5RCX8", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc86a4af-cdb8-4531-9f3f-f66cd10a104c", "record_id": "flaws_cloudtrail:0000463:dc86a4af-cdb8-4531-9f3f-f66cd10a104c", "row_index": 463, "timestamp": "2017-05-26T22:48:04Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA7B5XRC2R6HU5RCX8", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1026, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc86a4af-cdb8-4531-9f3f-f66cd10a104c", "eventTime": "2017-05-26T22:48:04Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA7B5XRC2R6HU5RCX8", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "942e58db-875a-4d12-80e3-615697a861a20", "record_id": "flaws_cloudtrail:0000464:942e58db-875a-4d12-80e3-615697a861a20", "row_index": 464, "timestamp": "2017-05-26T22:48:04Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA7B5XRC2R6HU5RCX8", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "942e58db-875a-4d12-80e3-615697a861a20", "eventTime": "2017-05-26T22:48:04Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA7B5XRC2R6HU5RCX8", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2d6d645-2618-4d6c-a5ff-a5b65bdf9e6c", "record_id": "flaws_cloudtrail:0000465:e2d6d645-2618-4d6c-a5ff-a5b65bdf9e6c", "row_index": 465, "timestamp": "2017-05-26T22:48:04Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAQJ0RCUSJXW0ZW86I", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2d6d645-2618-4d6c-a5ff-a5b65bdf9e6c", "eventTime": "2017-05-26T22:48:04Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAQJ0RCUSJXW0ZW86I", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55921b9-09af-4950-8a0f-a6269f124acf", "record_id": "flaws_cloudtrail:0000466:55921b9-09af-4950-8a0f-a6269f124acf", "row_index": 466, "timestamp": "2017-05-26T22:48:04Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAQJ0RCUSJXW0ZW86I", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1095, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55921b9-09af-4950-8a0f-a6269f124acf", "eventTime": "2017-05-26T22:48:04Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAQJ0RCUSJXW0ZW86I", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed6721bd-2972-44ac-a4be-f33a4f5c125a", "record_id": "flaws_cloudtrail:0000467:ed6721bd-2972-44ac-a4be-f33a4f5c125a", "row_index": 467, "timestamp": "2017-05-26T22:48:04Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAQJ0RCUSJXW0ZW86I", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed6721bd-2972-44ac-a4be-f33a4f5c125a", "eventTime": "2017-05-26T22:48:04Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAQJ0RCUSJXW0ZW86I", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f79f54a7-8475-4e5f-be1e-bd0e20ee3a87", "record_id": "flaws_cloudtrail:0000468:f79f54a7-8475-4e5f-be1e-bd0e20ee3a87", "row_index": 468, "timestamp": "2017-05-26T22:48:04Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAQJ0RCUSJXW0ZW86I", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1056, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f79f54a7-8475-4e5f-be1e-bd0e20ee3a87", "eventTime": "2017-05-26T22:48:04Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAQJ0RCUSJXW0ZW86I", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "448f051b-e1a3-45b9-8501-58ed58b227c0", "record_id": "flaws_cloudtrail:0000469:448f051b-e1a3-45b9-8501-58ed58b227c0", "row_index": 469, "timestamp": "2017-05-26T22:48:05Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA7B5XRC2R6HU5RCX8", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1032, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "448f051b-e1a3-45b9-8501-58ed58b227c0", "eventTime": "2017-05-26T22:48:05Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA7B5XRC2R6HU5RCX8", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4fb167a5-ef78-4fc2-bb4f-ac22f11585e4", "record_id": "flaws_cloudtrail:0000470:4fb167a5-ef78-4fc2-bb4f-ac22f11585e4", "row_index": 470, "timestamp": "2017-05-26T22:48:05Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA7B5XRC2R6HU5RCX8", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1032, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4fb167a5-ef78-4fc2-bb4f-ac22f11585e4", "eventTime": "2017-05-26T22:48:05Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA7B5XRC2R6HU5RCX8", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a9c9da1-ebe9-4ab8-9b6f-4362f5ac8f13", "record_id": "flaws_cloudtrail:0000471:9a9c9da1-ebe9-4ab8-9b6f-4362f5ac8f13", "row_index": 471, "timestamp": "2017-05-26T22:48:05Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA7B5XRC2R6HU5RCX8", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1033, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a9c9da1-ebe9-4ab8-9b6f-4362f5ac8f13", "eventTime": "2017-05-26T22:48:05Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA7B5XRC2R6HU5RCX8", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b57738-9400-41e6-839c-996199cce29d", "record_id": "flaws_cloudtrail:0000472:0b57738-9400-41e6-839c-996199cce29d", "row_index": 472, "timestamp": "2017-05-26T22:48:05Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIA7B5XRC2R6HU5RCX8", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1031, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b57738-9400-41e6-839c-996199cce29d", "eventTime": "2017-05-26T22:48:05Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIA7B5XRC2R6HU5RCX8", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:02Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80cfc4bc-1035-435a-b87b-9386224da876", "record_id": "flaws_cloudtrail:0000473:80cfc4bc-1035-435a-b87b-9386224da876", "row_index": 473, "timestamp": "2017-05-26T22:48:05Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAQJ0RCUSJXW0ZW86I", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80cfc4bc-1035-435a-b87b-9386224da876", "eventTime": "2017-05-26T22:48:05Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAQJ0RCUSJXW0ZW86I", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d77eaaa-f15c-406b-9715-0a1b0c6f704d", "record_id": "flaws_cloudtrail:0000474:4d77eaaa-f15c-406b-9715-0a1b0c6f704d", "row_index": 474, "timestamp": "2017-05-26T22:48:05Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAQJ0RCUSJXW0ZW86I", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d77eaaa-f15c-406b-9715-0a1b0c6f704d", "eventTime": "2017-05-26T22:48:05Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAQJ0RCUSJXW0ZW86I", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7bab2a6-830b-49c0-bac3-dca01447a94", "record_id": "flaws_cloudtrail:0000475:a7bab2a6-830b-49c0-bac3-dca01447a94", "row_index": 475, "timestamp": "2017-05-26T22:48:05Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAQJ0RCUSJXW0ZW86I", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1094, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7bab2a6-830b-49c0-bac3-dca01447a94", "eventTime": "2017-05-26T22:48:05Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAQJ0RCUSJXW0ZW86I", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be67f775-b024-4306-91db-226bbe24c7c3", "record_id": "flaws_cloudtrail:0000476:be67f775-b024-4306-91db-226bbe24c7c3", "row_index": 476, "timestamp": "2017-05-26T22:48:06Z", "event_type": "GetBucketReplication", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:cloudaux", "user_name": null, "access_key_id": "ASIAQJ0RCUSJXW0ZW86I", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1095, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be67f775-b024-4306-91db-226bbe24c7c3", "eventTime": "2017-05-26T22:48:06Z", "eventName": "GetBucketReplication", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:cloudaux", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/cloudaux", "accountId": "811596193553", "accessKeyId": "ASIAQJ0RCUSJXW0ZW86I", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:03Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"replication": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "146016dfd-5ab5-4198-aa2d-ab07a18d7477", "record_id": "flaws_cloudtrail:0000477:146016dfd-5ab5-4198-aa2d-ab07a18d7477", "row_index": 477, "timestamp": "2017-05-26T22:48:07Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "146016dfd-5ab5-4198-aa2d-ab07a18d7477", "eventTime": "2017-05-26T22:48:07Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAR367T6LJFIXWDZ3N", "expiration": "May 26, 2017 11:48:07 PM", "sessionToken": "FQoDYXdzECAaDGoVpTCjMRIrG6jkAyLMAfzOpWRfl+RXWqY5kcUgoJTTMBOI4+t8RcecRC/hbEmSnH9vlo5gMb3X3HDIB9SlCyljez4ZTGpCX3B/WKSab0TKgwaJKaHsD/ev9jlu9XIWsZJf/2s36BDCGqTamPqCe+ezMkyFQCb57mLVflOC/ZScKNpLDq9/3704qWRScQEgWZykCyp/uQufhG1fzkR4wLx1LXph+dtzyzhSboOC5y0IGPVfdELVp68hATFzHQ+BP9mUK/AHwHu0e+WXiBtY37PyS8hnFHglRM9H9yin4aLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d54c9d16-815b-4fe1-9009-d38d226e7730", "record_id": "flaws_cloudtrail:0000478:d54c9d16-815b-4fe1-9009-d38d226e7730", "row_index": 478, "timestamp": "2017-05-26T22:48:07Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d54c9d16-815b-4fe1-9009-d38d226e7730", "eventTime": "2017-05-26T22:48:07Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA7GAWQS5SDTF5UOKY", "expiration": "May 26, 2017 11:48:07 PM", "sessionToken": "FQoDYXdzECAaDDpby4FPeb20R7PLUiLMATt337zP7m3ErLzbP5Nr7CWr2nHqVvnd2jWCa5j/ZRYjuhgZ98UAppJ377QrfuQC+Ct9NFQbfocUyHrTwfM0X8sOUMpK0jqVfRGC3cmiu64wjzL0ZKqoy9Mh7Xoj5qq5EFmFEAmeORXG+sw77hpeNT2BTfKnTmSEY/21oHh4Xgb38dPwd1PoUDdfjt00YeL2BTvFUyC7RPKp2bzycViqoJBi3C2wy24j7CWtZofDC5Gn2l3Ta1fRlm+/8+vYPX8zpDYCRTXb7zYxml1ZByin4aLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c8aad18-62ae-4eda-8840-a971a9fdebc7", "record_id": "flaws_cloudtrail:0000479:5c8aad18-62ae-4eda-8840-a971a9fdebc7", "row_index": 479, "timestamp": "2017-05-26T22:48:07Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAR367T6LJFIXWDZ3N", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 986, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c8aad18-62ae-4eda-8840-a971a9fdebc7", "eventTime": "2017-05-26T22:48:07Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAR367T6LJFIXWDZ3N", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:07Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d730512b-2d9c-4569-9d44-e2df6a74ae80", "record_id": "flaws_cloudtrail:0000480:8d730512b-2d9c-4569-9d44-e2df6a74ae80", "row_index": 480, "timestamp": "2017-05-26T22:48:08Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA7GAWQS5SDTF5UOKY", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d730512b-2d9c-4569-9d44-e2df6a74ae80", "eventTime": "2017-05-26T22:48:08Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA7GAWQS5SDTF5UOKY", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:07Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b67979b-b872-40df-a66d-db1068e2ab43", "record_id": "flaws_cloudtrail:0000481:b67979b-b872-40df-a66d-db1068e2ab43", "row_index": 481, "timestamp": "2017-05-26T22:48:08Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b67979b-b872-40df-a66d-db1068e2ab43", "eventTime": "2017-05-26T22:48:08Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA77VASQPZE89EQ4LR", "expiration": "May 26, 2017 11:48:08 PM", "sessionToken": "FQoDYXdzECAaDGV4VYiqLO6HA9VE4CLMAcHzYZtooVrMRr9A/8d4ysurBLon08cCK84xMSEvgoPa8osB1Yb7twjX8b63h2cgjpkhY/TvkVSU1g8FCEu59T1ni4cru6Q1fAh90xRvzI1OJJCdouqUYFoVGKpcb7S8m0ksLfCLAE0eyqsIS0C+OB+rxhd8A/5vX+T8CeLPOjlmxKPf24DElN1oLTZ3sk0xww0aIZbaNiBiutDtrmnJh4Loka9VDPc+uACUkMMoPbrr+eQr7CTAzNkeg2ozomQ5jNaAOENFHhUEd+YX0yio4aLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a037b5fa-5a4c-422b-a38c-9d5bbc3bc98f", "record_id": "flaws_cloudtrail:0000482:a037b5fa-5a4c-422b-a38c-9d5bbc3bc98f", "row_index": 482, "timestamp": "2017-05-26T22:48:09Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA77VASQPZE89EQ4LR", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 990, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a037b5fa-5a4c-422b-a38c-9d5bbc3bc98f", "eventTime": "2017-05-26T22:48:09Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA77VASQPZE89EQ4LR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:08Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1034e8b6-4b50-437a-b647-68c97ae8fec2", "record_id": "flaws_cloudtrail:0000483:1034e8b6-4b50-437a-b647-68c97ae8fec2", "row_index": 483, "timestamp": "2017-05-26T22:48:09Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1034e8b6-4b50-437a-b647-68c97ae8fec2", "eventTime": "2017-05-26T22:48:09Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAH6JXUMEPMMB6ZYZ5", "expiration": "May 26, 2017 11:48:09 PM", "sessionToken": "FQoDYXdzECAaDJN99aHC/Jom4RA3GyLMATqpkWJatpj/QRTGlw9H2OesIMnopC5P08TVgah39/yg1LaTWDMNsD7DesV93sTWmxkky71C/u3cUJNz4ccmFa/6YuZGJrfSP3LTTEvyhSPGZTU5kEK9Bqw7F1MgJImecK2aydufWqw76XVAj0i0mWN11NpdDXnNW2UhvcUyjUZcGFK5UBaPja1TiV7ak/I48/7vxEOf5Ni1mTIxBAbuFvlfpzMYvHDDCuwavyNZAZYceKeRo5ez0aEWmGU/ADZRG+FSMA3gWoIAEdTiZyip4aLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "004fb641-beaf-4ee3-bf0b-13d0bb1b0896", "record_id": "flaws_cloudtrail:0000484:004fb641-beaf-4ee3-bf0b-13d0bb1b0896", "row_index": 484, "timestamp": "2017-05-26T22:48:11Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAH6JXUMEPMMB6ZYZ5", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 991, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "004fb641-beaf-4ee3-bf0b-13d0bb1b0896", "eventTime": "2017-05-26T22:48:11Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAH6JXUMEPMMB6ZYZ5", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:09Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "adb0cbad-a724-46b4-ac50-a3a80d1f9890", "record_id": "flaws_cloudtrail:0000485:adb0cbad-a724-46b4-ac50-a3a80d1f9890", "row_index": 485, "timestamp": "2017-05-26T22:48:11Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "adb0cbad-a724-46b4-ac50-a3a80d1f9890", "eventTime": "2017-05-26T22:48:11Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA491IG0LUA01C846H", "expiration": "May 26, 2017 11:48:11 PM", "sessionToken": "FQoDYXdzECAaDE37azAZmc8+4iCZrSLMAWAa2TH3qZ1SsQRnMvOP/qLGjpdFkDoLhdMi++5GGLc3eQxLPdtsdkR0eHXQlh8xCweVeRFk9+JWfqPC5AWbDqBuOOnoNf+boBF5qKdCVubXH6L6uNupUd5F9g7SFOIiXbXOnHT8GJpy8TjSNIORG1WBnzADr+be9WiJYk8M+C8wEyVunr3Fp7ODfnHDQ5XVfE7PATJr3oiZ8qTbpgOEowM1FxpMV1IdPGIwsr5FzHnk/HZumaSqdC3R0ddJFtaA8/jnSswaNZfiJtT7fyir4aLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61d00657-8268-4b93-a87d-ff9c28619f73", "record_id": "flaws_cloudtrail:0000486:61d00657-8268-4b93-a87d-ff9c28619f73", "row_index": 486, "timestamp": "2017-05-26T22:48:12Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA491IG0LUA01C846H", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61d00657-8268-4b93-a87d-ff9c28619f73", "eventTime": "2017-05-26T22:48:12Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA491IG0LUA01C846H", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:11Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca88ac12-329f-4f2c-a386-545ebc5eb976", "record_id": "flaws_cloudtrail:0000487:ca88ac12-329f-4f2c-a386-545ebc5eb976", "row_index": 487, "timestamp": "2017-05-26T22:48:12Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca88ac12-329f-4f2c-a386-545ebc5eb976", "eventTime": "2017-05-26T22:48:12Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAKJ4URXBFZ78DSGKI", "expiration": "May 26, 2017 11:48:12 PM", "sessionToken": "FQoDYXdzECAaDMURD8U8uQrezcQYQyLMARmUIdxCa2V9Lpm6YXxfCHd+HLZvI6wgr76uRtbCfYCSeuDp0Tw0cOvZggE+7+TIkDb5WavWXWr0ZhdH1OOJ15ACkSeW/7TniCKi0Sl1rHt376KHM4NssYzHPXBpSmxsaodT3VjkdvNW/gDSo6HaIYsw4SPERxXvXgChbjC1rJ8GUsH/9wSsfVGad2A4xHY4+vlwlz+Z3Ebw38VV7XtNF5G+AeKPR8kOrEbrJj7BikTy22KolX1a7yIptZij0lONhrMMuMJ+Tfa1PSMnoCis4aLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d60463ec-0f8c-4dd6-b6bf-868532af790f", "record_id": "flaws_cloudtrail:0000488:d60463ec-0f8c-4dd6-b6bf-868532af790f", "row_index": 488, "timestamp": "2017-05-26T22:48:13Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAKJ4URXBFZ78DSGKI", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 987, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d60463ec-0f8c-4dd6-b6bf-868532af790f", "eventTime": "2017-05-26T22:48:13Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAKJ4URXBFZ78DSGKI", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:12Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "069b447a-20cc-46cf-877a-eaefdd5b65a4", "record_id": "flaws_cloudtrail:0000489:069b447a-20cc-46cf-877a-eaefdd5b65a4", "row_index": 489, "timestamp": "2017-05-26T22:48:14Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "069b447a-20cc-46cf-877a-eaefdd5b65a4", "eventTime": "2017-05-26T22:48:14Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAV1X1BWC2WKUW82YD", "expiration": "May 26, 2017 11:48:14 PM", "sessionToken": "FQoDYXdzECAaDCeffLqZgxTfi+9hFyLMAcI4D47ZAcEyvduZRoUt+OcrNmBiefmJmV16tn+0RPuh2ZHSLthBlpcizYcPG8JYte5he821no31Z856H3tZMnuxkq0JDORC74cXSWx78A4wrg9zVHOXoSKJZ7snNM2wkRqikYEQogsduVwOHwh8W1PHpxGzfPQl8IGBmIu3+vNknzjGv5OGnSOLJxM7Xi2DOy8DomhTwiL5XS8Reu3wtWS9lu5gfWKMgs7wyTMA269TeJwn32l+V0VSOfXBFrpRXpQ+6oJvRfJEFT5UbCiu4aLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "544357a-bc1c-4512-bc9a-c7a3a1c8578a", "record_id": "flaws_cloudtrail:0000490:544357a-bc1c-4512-bc9a-c7a3a1c8578a", "row_index": 490, "timestamp": "2017-05-26T22:48:14Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAV1X1BWC2WKUW82YD", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 982, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "544357a-bc1c-4512-bc9a-c7a3a1c8578a", "eventTime": "2017-05-26T22:48:14Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAV1X1BWC2WKUW82YD", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:14Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c911cb9-1908-4750-82b8-6ad157f93585", "record_id": "flaws_cloudtrail:0000491:8c911cb9-1908-4750-82b8-6ad157f93585", "row_index": 491, "timestamp": "2017-05-26T22:48:15Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c911cb9-1908-4750-82b8-6ad157f93585", "eventTime": "2017-05-26T22:48:15Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAWG2ESBZJEOO7IAIY", "expiration": "May 26, 2017 11:48:15 PM", "sessionToken": "FQoDYXdzECAaDBtGU+H3eqmc0MbJEyLMAZsEIf6rRwtS2Z6yXQzUdvSi5QsQTHgcDHoWnIPx/Bz2ZxL3XhI7NcUHjZNMCs6O1oLmnSDAAIdI8FNq466Ta8hOJDUWjCJ02jhvbZKP/g/QHh6uMH9YwN2FS5ZvzmS0W1n3UeQBjbkDliJ4uAU0GNX2ZIJ7vl8ldqxM6eEJBMyVcpeel8BrQY890oq4V7SMAs2gUwIPCWdXh2vuUuDZEzEZpFbZY2psNYAgs+Xf/S6vV3VWTkbcp9KO6/QwcfEDcTmXEKkIC198PFyADiiv4aLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b7e1135-bb43-4e05-a84c-0eb52697b24f", "record_id": "flaws_cloudtrail:0000492:7b7e1135-bb43-4e05-a84c-0eb52697b24f", "row_index": 492, "timestamp": "2017-05-26T22:48:16Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAWG2ESBZJEOO7IAIY", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 990, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b7e1135-bb43-4e05-a84c-0eb52697b24f", "eventTime": "2017-05-26T22:48:16Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAWG2ESBZJEOO7IAIY", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:15Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a2012cf-98c4-4b33-8298-533a28ab31a1", "record_id": "flaws_cloudtrail:0000493:0a2012cf-98c4-4b33-8298-533a28ab31a1", "row_index": 493, "timestamp": "2017-05-26T22:48:16Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a2012cf-98c4-4b33-8298-533a28ab31a1", "eventTime": "2017-05-26T22:48:16Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA92B15DB1UY0D2G05", "expiration": "May 26, 2017 11:48:16 PM", "sessionToken": "FQoDYXdzECAaDJUQbtelmap2vXQuwyLMAVosF1t4KIufuxpTdXh2O2GWsaD+4rOcLi17Q5ZKRt5R4FFlizR9DluXRRBsXrB5CzLNbS94TQLr2zFSPJrVyVDSEZVAW4SUU5PDYso42HiTqFihPSBh8Pyjc/mV2N8uQBuXQi56DfWJuN/WZ+qqrc5PFq2ZImLkN5BxMJ/ZswlxQfL8aDMEdZqqczqQNZ+9JCKhif5vvt8G6DI+E/3xzflCW8ZYReDzS85X2MNz6jtOWojtkW0w3tL74JMF2g+6Ewu1Mb+C/rmEkmpZdyiw4aLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7913bc4c-5677-4402-b1a2-ce6ebb459033a", "record_id": "flaws_cloudtrail:0000494:7913bc4c-5677-4402-b1a2-ce6ebb459033a", "row_index": 494, "timestamp": "2017-05-26T22:48:17Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA92B15DB1UY0D2G05", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 989, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7913bc4c-5677-4402-b1a2-ce6ebb459033a", "eventTime": "2017-05-26T22:48:17Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA92B15DB1UY0D2G05", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:16Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e706ffe0-285b-4819-888d-0af0abf4f9e5", "record_id": "flaws_cloudtrail:0000495:e706ffe0-285b-4819-888d-0af0abf4f9e5", "row_index": 495, "timestamp": "2017-05-26T22:48:17Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e706ffe0-285b-4819-888d-0af0abf4f9e5", "eventTime": "2017-05-26T22:48:17Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAIUR7NAXZM1UQEMZT", "expiration": "May 26, 2017 11:48:17 PM", "sessionToken": "FQoDYXdzECAaDPfp00e+bsM3ZRQtaiLMAXuLhnLNURP9ulYGLQy2JMh0AHoCkFfwN1HvUwUn8vmlrMVwFiG6RBdeDkhn56761b2Mv0YnY/DWAFkJdVFpec+CI49L8nbco3bxXzmQZcx7fa/zDYa+b+ZZoJcFT3urTbFCoiLdxH9aS+R5fiysnCl5XiAIuJmuS8KJzpr+VAyh5HC8pRIPda2slt7sR10oSpdkkL/IjNNggxe9acUEULyjYVRZB7aJWxsjahVV+X3ZLzHzk/78mja2DBVRJ96qweQDogrBwd95btSzCix4aLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55a456f9-31e5-4f2b-b1ad-f7dc605a3887", "record_id": "flaws_cloudtrail:0000496:55a456f9-31e5-4f2b-b1ad-f7dc605a3887", "row_index": 496, "timestamp": "2017-05-26T22:48:19Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55a456f9-31e5-4f2b-b1ad-f7dc605a3887", "eventTime": "2017-05-26T22:48:19Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAVJK6JGT215DA2R8Q", "expiration": "May 26, 2017 11:48:19 PM", "sessionToken": "FQoDYXdzECAaDILT5ZxU+1frqxJo8iLMAdvFWuK3FZi/Hs+erTl0XXheL6gKaeUfMlROShHarf69ushwepCNONs35AiNBGNc5CjtNCYM95zEQwKOwkfSqsgL3BitLMKaS7fnkLiyC3AlkqI9F3b0ApZ4rutOATCtssWavZGc1frvLakHy57k1Vrfb4JZf0MPNDGJ4m+lojaXwtEDxFZWo/p+bymv71vjFhVXqbFhH6A6lc4V/dGl/MaF16P+S5qjNTaq5kAM5vbOpzItY8wB5wWJikJ0SzNikTEckDqHRqmOvr7vYCiz4aLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c02233-9c0d-4cce-81c4-903d8c21e7a4", "record_id": "flaws_cloudtrail:0000497:8c02233-9c0d-4cce-81c4-903d8c21e7a4", "row_index": 497, "timestamp": "2017-05-26T22:48:19Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c02233-9c0d-4cce-81c4-903d8c21e7a4", "eventTime": "2017-05-26T22:48:19Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAD1PIVZ5LQIB9WPBZ", "expiration": "May 26, 2017 11:48:19 PM", "sessionToken": "FQoDYXdzECAaDAUdNmsZDASWTP5b+yLMAWnlxKWcdQtNQCNbqhLPzqZwesgsIMn7a6R7aRA6CXFOfGWCrlla5UqOpM2fUe4axGLsvVzAJ3pXawgu2o6eEO1FWh8hK5eNUMCb+rQa08V2yAIqO2tbyb8F7qsnjpN+wiGyRVHl0gGZgP2fvkUnmPNfDVC+/BB6qav73tpTHCJwbqFqwKpZIczHCkIZEk9MbDJc0zNcK5R86AqWCdl5O9tOAYqayhfuZbxzImu24wJEIKj/zFmSemJnzmrsm0yM6xNqh6wlgwlaNfiddCiz4aLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "699c5baf-f723-4fb8-a3ed-9d18b887119a", "record_id": "flaws_cloudtrail:0000498:699c5baf-f723-4fb8-a3ed-9d18b887119a", "row_index": 498, "timestamp": "2017-05-26T22:48:19Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAD1PIVZ5LQIB9WPBZ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "699c5baf-f723-4fb8-a3ed-9d18b887119a", "eventTime": "2017-05-26T22:48:19Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAD1PIVZ5LQIB9WPBZ", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88358c5e-eaf0-45b2-99fc-0c3a155ee836", "record_id": "flaws_cloudtrail:0000499:88358c5e-eaf0-45b2-99fc-0c3a155ee836", "row_index": 499, "timestamp": "2017-05-26T22:48:20Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88358c5e-eaf0-45b2-99fc-0c3a155ee836", "eventTime": "2017-05-26T22:48:20Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA3F1ZX67L3UWHY4VS", "expiration": "May 26, 2017 11:48:20 PM", "sessionToken": "FQoDYXdzECAaDH00MhwbfAJS8E9nfSLMAYnEtUi4apBRX/wSb9ubglkimZM3PgEF6dlm+tO7oFT3Msy71Gel6bYUOXiZzY+bbxnjW0WE8U8wJuHrXKygebYk5coUnaPqYPpoKxyE2QcJ3rrrXSVlu2s46dsbiAdXCx2cnZuy7DwMCw61dWuZv8QO0G/rUYr8wpDmNN/n606NrwH1DqFs4iCQMwwbhMPF4/z1/J5mohHW8qPkxkhrnPBptLUHVKClMVEmL9ie27WkTyirpCTtA+K+Vl4t7xv4HVxCaC/MRu+t/TqAxCi04aLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c554090f6-6c2c-46cb-91a4-e22ae801ca86", "record_id": "flaws_cloudtrail:0000500:c554090f6-6c2c-46cb-91a4-e22ae801ca86", "row_index": 500, "timestamp": "2017-05-26T22:48:21Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA3F1ZX67L3UWHY4VS", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 988, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c554090f6-6c2c-46cb-91a4-e22ae801ca86", "eventTime": "2017-05-26T22:48:21Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA3F1ZX67L3UWHY4VS", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:20Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "867089-47a9-4862-b735-85a8a9a609c9", "record_id": "flaws_cloudtrail:0000501:867089-47a9-4862-b735-85a8a9a609c9", "row_index": 501, "timestamp": "2017-05-26T22:48:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "867089-47a9-4862-b735-85a8a9a609c9", "eventTime": "2017-05-26T22:48:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAS9QCPIDW5C02Z745", "expiration": "May 26, 2017 11:48:22 PM", "sessionToken": "FQoDYXdzECAaDPvYVTc90lQADVPhAiLMAa++vnNe85kyMfnRbi/LqEnMMV7zyE5Gshvf4P3VbTamnp1BDJ68nj3ovb0uEbDMiH2Bd7ktcq9W5TEHcrs88TI6v8IPqnlPIrKPMYHKOZ6CxhUM1aHf6mjzioDW8GjtmOnpx8XUHFVVznJtdq7e/+s/zeZVRw9ogaXZIpZZLAV310/C6ozrwsJZWxcgcmqzkOIXSDLQoko/eALoWD16FSlKbrLA2tP8oDawJFaq+RpmMQjI2E98lZvHDmkUdlv1kaHWnbmvOMa7zmFMHCi24aLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d61fddc-971c-41e2-9325-72d758995", "record_id": "flaws_cloudtrail:0000502:2d61fddc-971c-41e2-9325-72d758995", "row_index": 502, "timestamp": "2017-05-26T22:48:23Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAS9QCPIDW5C02Z745", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d61fddc-971c-41e2-9325-72d758995", "eventTime": "2017-05-26T22:48:23Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAS9QCPIDW5C02Z745", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:22Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f68a5f2-cac8-4875-bcb0-70116b0707dc", "record_id": "flaws_cloudtrail:0000503:7f68a5f2-cac8-4875-bcb0-70116b0707dc", "row_index": 503, "timestamp": "2017-05-26T22:48:23Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f68a5f2-cac8-4875-bcb0-70116b0707dc", "eventTime": "2017-05-26T22:48:23Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIASRSMWW2I5GQINVIO", "expiration": "May 26, 2017 11:48:23 PM", "sessionToken": "FQoDYXdzECAaDA9kRmCuLn4kxC4E6yLMAZRDlKnNBFAjAGLuPcGOarbP1lM5F68KTnxrzMPXLZsjEYWkppg4PUDbSXXZC34rNPvyG5r8YQQaCi5HSemUfMhfCEF7BQQgL89+h9s47zKqPSwBo9/tuRQDWmgIcV17QXfdpgcujdc5nosnH2NwDo7DXXJ+BeItcC4LAN7JnEjUi54d6PcBMBKfzlFfj2FzahsYJRAIJ8LCdA+wffmoMWzeZdIpAD0t0eg7Y6iNlcee7dquP8GXgYJKgCqo+27JgmBfqhUR7mGnorczeyi34aLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f1f779f-72a2-4721-8dd4-a76ed0dc93a2", "record_id": "flaws_cloudtrail:0000504:1f1f779f-72a2-4721-8dd4-a76ed0dc93a2", "row_index": 504, "timestamp": "2017-05-26T22:48:24Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIASRSMWW2I5GQINVIO", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f1f779f-72a2-4721-8dd4-a76ed0dc93a2", "eventTime": "2017-05-26T22:48:24Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIASRSMWW2I5GQINVIO", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a58749-90a9-4d40-81b4-1e06e533b623", "record_id": "flaws_cloudtrail:0000505:5a58749-90a9-4d40-81b4-1e06e533b623", "row_index": 505, "timestamp": "2017-05-26T22:48:24Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a58749-90a9-4d40-81b4-1e06e533b623", "eventTime": "2017-05-26T22:48:24Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAMYPFTMNX5WNQVDZV", "expiration": "May 26, 2017 11:48:24 PM", "sessionToken": "FQoDYXdzECAaDEnSMGgBTWlJnaOUcCLMATcXEUg4vsc9+GLsRVTRZGlie5E7lRIcknk6c4JNIJLMW7XQXcNyHjx933a8QdUTlmMJF97tlgBjNT534E7SVMefeyFq+Sttq4bsgJFBjO5EeD3XctP4mpqzrp5LPkDv9WrooqlB00tAjj5ckfv/l7FHjCJLuaMvaJBkrYqB8eyQCEo1PHNw/HdPePJPaiddgW4lG/ifarF7EL+xZr8TO7pliOiPHffqQxFtydaBnGDcywKxchdP9aOsRM6CGUm9tqFBirqiVUZ5joDLgii44aLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32bc6e06-b8a1-498d-b688-073c4238ab94", "record_id": "flaws_cloudtrail:0000506:32bc6e06-b8a1-498d-b688-073c4238ab94", "row_index": 506, "timestamp": "2017-05-26T22:48:25Z", "event_type": "DescribeConnections", "event_source": "directconnect.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAMYPFTMNX5WNQVDZV", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 985, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32bc6e06-b8a1-498d-b688-073c4238ab94", "eventTime": "2017-05-26T22:48:25Z", "eventName": "DescribeConnections", "eventSource": "directconnect.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAMYPFTMNX5WNQVDZV", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:24Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02b1d375-d5d2-4e39-b1da-0d2dbee7bfef", "record_id": "flaws_cloudtrail:0000507:02b1d375-d5d2-4e39-b1da-0d2dbee7bfef", "row_index": 507, "timestamp": "2017-05-26T22:48:25Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1451, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02b1d375-d5d2-4e39-b1da-0d2dbee7bfef", "eventTime": "2017-05-26T22:48:25Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA66WF2T9XBPYH5Y6K", "expiration": "May 26, 2017 11:48:25 PM", "sessionToken": "FQoDYXdzECAaDOH6JR09cVjWr2j3/SLMAdUG9gBWfaAqe1JtXAyp6511aoKG0wIkf0Wb5evvGFbg27/MyRzsngbqbYyxyHPkkxeeHINR7YNtQyiqU3Cojo/LXXlEfdShG3yziakJsCVJfDWaTxpSIpCK91kcophEv6JaxmlQ6XTAKt5BVTbDFCIcnFJnR0DgARFtU9+4s75gySMYHcn9UCzsoEiIT6Q9CtM+qX7uf/GsQPPaCENxK2ax0ziiKS8SDoVLEZ9PvGgosldUtXobfd7w2GC80WnTilp4rcBdAE1svct0Aii54aLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "874bf585-0fd0-40b4-8b83-61af79f90ce7", "record_id": "flaws_cloudtrail:0000508:874bf585-0fd0-40b4-8b83-61af79f90ce7", "row_index": 508, "timestamp": "2017-05-26T22:48:26Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA66WF2T9XBPYH5Y6K", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1003, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "874bf585-0fd0-40b4-8b83-61af79f90ce7", "eventTime": "2017-05-26T22:48:26Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA66WF2T9XBPYH5Y6K", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0eb979ab-a075-4918-ae0b-c5786810d9e9", "record_id": "flaws_cloudtrail:0000509:0eb979ab-a075-4918-ae0b-c5786810d9e9", "row_index": 509, "timestamp": "2017-05-26T22:48:28Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA66WF2T9XBPYH5Y6K", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1003, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0eb979ab-a075-4918-ae0b-c5786810d9e9", "eventTime": "2017-05-26T22:48:28Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA66WF2T9XBPYH5Y6K", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf5673bb-a882-461f-b0b2-b2e148f77c4a", "record_id": "flaws_cloudtrail:0000510:cf5673bb-a882-461f-b0b2-b2e148f77c4a", "row_index": 510, "timestamp": "2017-05-26T22:48:29Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA66WF2T9XBPYH5Y6K", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 999, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf5673bb-a882-461f-b0b2-b2e148f77c4a", "eventTime": "2017-05-26T22:48:29Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA66WF2T9XBPYH5Y6K", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e89218-2252-4741-bdaa-507e75a52c45", "record_id": "flaws_cloudtrail:0000511:e89218-2252-4741-bdaa-507e75a52c45", "row_index": 511, "timestamp": "2017-05-26T22:48:30Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA66WF2T9XBPYH5Y6K", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1001, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e89218-2252-4741-bdaa-507e75a52c45", "eventTime": "2017-05-26T22:48:30Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA66WF2T9XBPYH5Y6K", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ddf61b0e-23f3-4f52-ad25-8c9beef452a3", "record_id": "flaws_cloudtrail:0000512:ddf61b0e-23f3-4f52-ad25-8c9beef452a3", "row_index": 512, "timestamp": "2017-05-26T22:48:31Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA66WF2T9XBPYH5Y6K", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1003, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ddf61b0e-23f3-4f52-ad25-8c9beef452a3", "eventTime": "2017-05-26T22:48:31Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA66WF2T9XBPYH5Y6K", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57bbd47d-43e8-4762-b2cb-c17a80ae7842", "record_id": "flaws_cloudtrail:0000513:57bbd47d-43e8-4762-b2cb-c17a80ae7842", "row_index": 513, "timestamp": "2017-05-26T22:48:32Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA66WF2T9XBPYH5Y6K", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1001, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57bbd47d-43e8-4762-b2cb-c17a80ae7842", "eventTime": "2017-05-26T22:48:32Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA66WF2T9XBPYH5Y6K", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25ca730c-5c63-474c-a97e-749c45d91fae", "record_id": "flaws_cloudtrail:0000514:25ca730c-5c63-474c-a97e-749c45d91fae", "row_index": 514, "timestamp": "2017-05-26T22:48:33Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA66WF2T9XBPYH5Y6K", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1000, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25ca730c-5c63-474c-a97e-749c45d91fae", "eventTime": "2017-05-26T22:48:33Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA66WF2T9XBPYH5Y6K", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f730767-14f9-4967-a26c-72f25d9aa564", "record_id": "flaws_cloudtrail:0000515:f730767-14f9-4967-a26c-72f25d9aa564", "row_index": 515, "timestamp": "2017-05-26T22:48:34Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA66WF2T9XBPYH5Y6K", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 997, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f730767-14f9-4967-a26c-72f25d9aa564", "eventTime": "2017-05-26T22:48:34Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA66WF2T9XBPYH5Y6K", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3826e873-5c2c-4a55-bcdc-9a628673253c", "record_id": "flaws_cloudtrail:0000516:3826e873-5c2c-4a55-bcdc-9a628673253c", "row_index": 516, "timestamp": "2017-05-26T22:48:35Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA66WF2T9XBPYH5Y6K", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 998, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3826e873-5c2c-4a55-bcdc-9a628673253c", "eventTime": "2017-05-26T22:48:35Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA66WF2T9XBPYH5Y6K", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69b732f5-b3c6-410f-a215-c8623c8b5c80", "record_id": "flaws_cloudtrail:0000517:69b732f5-b3c6-410f-a215-c8623c8b5c80", "row_index": 517, "timestamp": "2017-05-26T22:48:36Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA66WF2T9XBPYH5Y6K", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 999, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69b732f5-b3c6-410f-a215-c8623c8b5c80", "eventTime": "2017-05-26T22:48:36Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA66WF2T9XBPYH5Y6K", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc330b38-04c5-4c13-a9e6-fc32ad7253ed", "record_id": "flaws_cloudtrail:0000518:dc330b38-04c5-4c13-a9e6-fc32ad7253ed", "row_index": 518, "timestamp": "2017-05-26T22:48:37Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA66WF2T9XBPYH5Y6K", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 998, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc330b38-04c5-4c13-a9e6-fc32ad7253ed", "eventTime": "2017-05-26T22:48:37Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA66WF2T9XBPYH5Y6K", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d679089c-4f82-458f-b0dc-43f8b24c53aa", "record_id": "flaws_cloudtrail:0000519:5d679089c-4f82-458f-b0dc-43f8b24c53aa", "row_index": 519, "timestamp": "2017-05-26T22:48:37Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA66WF2T9XBPYH5Y6K", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 999, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d679089c-4f82-458f-b0dc-43f8b24c53aa", "eventTime": "2017-05-26T22:48:37Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA66WF2T9XBPYH5Y6K", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e71790-8966-4775-9a7f-b71493a86fb9", "record_id": "flaws_cloudtrail:0000520:6e71790-8966-4775-9a7f-b71493a86fb9", "row_index": 520, "timestamp": "2017-05-26T22:48:38Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA66WF2T9XBPYH5Y6K", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 997, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e71790-8966-4775-9a7f-b71493a86fb9", "eventTime": "2017-05-26T22:48:38Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA66WF2T9XBPYH5Y6K", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6a64ee2-1790-4d9b-8729-c82849c57c47", "record_id": "flaws_cloudtrail:0000521:f6a64ee2-1790-4d9b-8729-c82849c57c47", "row_index": 521, "timestamp": "2017-05-26T22:48:38Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA66WF2T9XBPYH5Y6K", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 998, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6a64ee2-1790-4d9b-8729-c82849c57c47", "eventTime": "2017-05-26T22:48:38Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA66WF2T9XBPYH5Y6K", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d6a2431-f29f-4137-9b75-a3500d5bf6f2", "record_id": "flaws_cloudtrail:0000522:2d6a2431-f29f-4137-9b75-a3500d5bf6f2", "row_index": 522, "timestamp": "2017-05-26T22:48:39Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d6a2431-f29f-4137-9b75-a3500d5bf6f2", "eventTime": "2017-05-26T22:48:39Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAM3IGHKHPPPSE60BA", "expiration": "May 26, 2017 11:48:39 PM", "sessionToken": "FQoDYXdzECAaDFs3lRejL1fiTJLWhyLMAf6T39SMYpwl9dQsfGE6ZMBfIeMCwueXtjVvSb4o4zxG5p6Q5OtjmB8oes9mdi9xQhK4tZQ1ZIbewP8gGqNnt8bWAGwUc1vG6fP1UEc+fap/PlzS79t2riSAs78VZ+aix1Gy/3mmSrSQRQMmirlJojcxUg/vWstg9x3FyyOQS27UZBSwwLUp4pJL1R/xr3CFKiMDjAJkHpIoM9XrQk1np148y7HJ1EEsxdcs8wy7glov+QxT9S+WfGmAb7nS1rDtfLFwDcFdJ4bPhRmNxCjH4aLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30a41f19-bd23-4946-84d5-920178aa2e3af", "record_id": "flaws_cloudtrail:0000523:30a41f19-bd23-4946-84d5-920178aa2e3af", "row_index": 523, "timestamp": "2017-05-26T22:48:40Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAM3IGHKHPPPSE60BA", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30a41f19-bd23-4946-84d5-920178aa2e3af", "eventTime": "2017-05-26T22:48:40Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAM3IGHKHPPPSE60BA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:39Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c843445d4-f60e-4c7d-90b6-559d62e22c0d", "record_id": "flaws_cloudtrail:0000524:c843445d4-f60e-4c7d-90b6-559d62e22c0d", "row_index": 524, "timestamp": "2017-05-26T22:48:41Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAM3IGHKHPPPSE60BA", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1065, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c843445d4-f60e-4c7d-90b6-559d62e22c0d", "eventTime": "2017-05-26T22:48:41Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAM3IGHKHPPPSE60BA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:39Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45c4b37e-b893-464c-ba1e-b586f098615f", "record_id": "flaws_cloudtrail:0000525:45c4b37e-b893-464c-ba1e-b586f098615f", "row_index": 525, "timestamp": "2017-05-26T22:48:42Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAM3IGHKHPPPSE60BA", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1060, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45c4b37e-b893-464c-ba1e-b586f098615f", "eventTime": "2017-05-26T22:48:42Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAM3IGHKHPPPSE60BA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:39Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28feca1c-051e-40c0-ac6d-1e8aaf10b6f6", "record_id": "flaws_cloudtrail:0000526:28feca1c-051e-40c0-ac6d-1e8aaf10b6f6", "row_index": 526, "timestamp": "2017-05-26T22:48:43Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAM3IGHKHPPPSE60BA", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28feca1c-051e-40c0-ac6d-1e8aaf10b6f6", "eventTime": "2017-05-26T22:48:43Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAM3IGHKHPPPSE60BA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:39Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ea0abab-a0de-42c0-9d2b-6b5d8958e46e", "record_id": "flaws_cloudtrail:0000527:8ea0abab-a0de-42c0-9d2b-6b5d8958e46e", "row_index": 527, "timestamp": "2017-05-26T22:48:44Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAM3IGHKHPPPSE60BA", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1064, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ea0abab-a0de-42c0-9d2b-6b5d8958e46e", "eventTime": "2017-05-26T22:48:44Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAM3IGHKHPPPSE60BA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:39Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e416b90-f6f9-42e8-8cd6-f40e7b291ee2", "record_id": "flaws_cloudtrail:0000528:0e416b90-f6f9-42e8-8cd6-f40e7b291ee2", "row_index": 528, "timestamp": "2017-05-26T22:48:45Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAM3IGHKHPPPSE60BA", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1062, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e416b90-f6f9-42e8-8cd6-f40e7b291ee2", "eventTime": "2017-05-26T22:48:45Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAM3IGHKHPPPSE60BA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:39Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e31d3810-c012-45ec-bc31-a9fe7cfb6d13", "record_id": "flaws_cloudtrail:0000529:e31d3810-c012-45ec-bc31-a9fe7cfb6d13", "row_index": 529, "timestamp": "2017-05-26T22:48:46Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAM3IGHKHPPPSE60BA", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1062, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e31d3810-c012-45ec-bc31-a9fe7cfb6d13", "eventTime": "2017-05-26T22:48:46Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAM3IGHKHPPPSE60BA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:39Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c5bea71-40a5-40c2-92ac-80b57e85b3f7", "record_id": "flaws_cloudtrail:0000530:2c5bea71-40a5-40c2-92ac-80b57e85b3f7", "row_index": 530, "timestamp": "2017-05-26T22:48:47Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAM3IGHKHPPPSE60BA", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c5bea71-40a5-40c2-92ac-80b57e85b3f7", "eventTime": "2017-05-26T22:48:47Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAM3IGHKHPPPSE60BA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:39Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08277d-76ea-4c70-943b-88cea55e602c", "record_id": "flaws_cloudtrail:0000531:08277d-76ea-4c70-943b-88cea55e602c", "row_index": 531, "timestamp": "2017-05-26T22:48:47Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAM3IGHKHPPPSE60BA", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08277d-76ea-4c70-943b-88cea55e602c", "eventTime": "2017-05-26T22:48:47Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAM3IGHKHPPPSE60BA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:39Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e59492f-6134-497c-9d05-65efed08ab9e", "record_id": "flaws_cloudtrail:0000532:8e59492f-6134-497c-9d05-65efed08ab9e", "row_index": 532, "timestamp": "2017-05-26T22:48:49Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAM3IGHKHPPPSE60BA", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e59492f-6134-497c-9d05-65efed08ab9e", "eventTime": "2017-05-26T22:48:49Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAM3IGHKHPPPSE60BA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:39Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce4461c0-5ba5-43c0-b378-0e284371a75d9", "record_id": "flaws_cloudtrail:0000533:ce4461c0-5ba5-43c0-b378-0e284371a75d9", "row_index": 533, "timestamp": "2017-05-26T22:48:49Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAM3IGHKHPPPSE60BA", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1060, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce4461c0-5ba5-43c0-b378-0e284371a75d9", "eventTime": "2017-05-26T22:48:49Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAM3IGHKHPPPSE60BA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:39Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d20b5553-3dff-41c7-8547-c7dbee763155", "record_id": "flaws_cloudtrail:0000534:d20b5553-3dff-41c7-8547-c7dbee763155", "row_index": 534, "timestamp": "2017-05-26T22:48:50Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAM3IGHKHPPPSE60BA", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1058, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d20b5553-3dff-41c7-8547-c7dbee763155", "eventTime": "2017-05-26T22:48:50Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAM3IGHKHPPPSE60BA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:39Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "479c556f-847f-44ec-90c8-92cb35bcc2ed", "record_id": "flaws_cloudtrail:0000535:479c556f-847f-44ec-90c8-92cb35bcc2ed", "row_index": 535, "timestamp": "2017-05-26T22:48:51Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "479c556f-847f-44ec-90c8-92cb35bcc2ed", "eventTime": "2017-05-26T22:48:51Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAV7FKSJSLOMB7JW6F", "expiration": "May 26, 2017 11:48:51 PM", "sessionToken": "FQoDYXdzECAaDLx1+jZhl9e1R9uPWiLMAepd4YNhcTnTy8IruZ3pP23S65FsJZgVPMpJzz/4diWwJbxQopvb4qVJAE/whCjuB+h1v6pmU6ck5R00G9r/SmyZl+3a3eE+Ib3vUHdP79W1QyP4m6k57U4BtXhUvk0tCbsY5i/qhyf88NUQvcfZrFnPn3DUrgT6IZ8edO5GGSLc+cipV0VucD3I7Fs1g50AV1NJsKLXgS4M0juTJwxEGReDprQ0jcb4yyRZK77WIC3BOS/xjMkF8uUK81LvotiDJwCbJdPsw6DlTF8ityjT4aLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42beb934-a417-40e8-b2ac-5541a6af9ea2", "record_id": "flaws_cloudtrail:0000536:42beb934-a417-40e8-b2ac-5541a6af9ea2", "row_index": 536, "timestamp": "2017-05-26T22:48:51Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAM3IGHKHPPPSE60BA", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42beb934-a417-40e8-b2ac-5541a6af9ea2", "eventTime": "2017-05-26T22:48:51Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAM3IGHKHPPPSE60BA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:39Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d3b1292-ae80-4ac1-a550-ae2887a1f697", "record_id": "flaws_cloudtrail:0000537:2d3b1292-ae80-4ac1-a550-ae2887a1f697", "row_index": 537, "timestamp": "2017-05-26T22:48:51Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAM3IGHKHPPPSE60BA", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d3b1292-ae80-4ac1-a550-ae2887a1f697", "eventTime": "2017-05-26T22:48:51Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAM3IGHKHPPPSE60BA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:39Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60a22a39-1a7d-4fc6-a967-fab821665e786", "record_id": "flaws_cloudtrail:0000538:60a22a39-1a7d-4fc6-a967-fab821665e786", "row_index": 538, "timestamp": "2017-05-26T22:48:53Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAV7FKSJSLOMB7JW6F", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 983, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60a22a39-1a7d-4fc6-a967-fab821665e786", "eventTime": "2017-05-26T22:48:53Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAV7FKSJSLOMB7JW6F", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:51Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4da4b83-1c0d-404f-90b0-a0adf08ba92e", "record_id": "flaws_cloudtrail:0000539:d4da4b83-1c0d-404f-90b0-a0adf08ba92e", "row_index": 539, "timestamp": "2017-05-26T22:48:54Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAV7FKSJSLOMB7JW6F", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 983, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4da4b83-1c0d-404f-90b0-a0adf08ba92e", "eventTime": "2017-05-26T22:48:54Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAV7FKSJSLOMB7JW6F", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:51Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16783b1e-57e9-4162-9833-bf6cdc6fc87a", "record_id": "flaws_cloudtrail:0000540:16783b1e-57e9-4162-9833-bf6cdc6fc87a", "row_index": 540, "timestamp": "2017-05-26T22:48:56Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAV7FKSJSLOMB7JW6F", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16783b1e-57e9-4162-9833-bf6cdc6fc87a", "eventTime": "2017-05-26T22:48:56Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAV7FKSJSLOMB7JW6F", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:51Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bbf65c5b-e6ac-4696-9dea-a33982bb64c9", "record_id": "flaws_cloudtrail:0000541:bbf65c5b-e6ac-4696-9dea-a33982bb64c9", "row_index": 541, "timestamp": "2017-05-26T22:48:57Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAV7FKSJSLOMB7JW6F", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 983, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bbf65c5b-e6ac-4696-9dea-a33982bb64c9", "eventTime": "2017-05-26T22:48:57Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAV7FKSJSLOMB7JW6F", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:51Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4be2061-f663-4e4d-93dc-baea4e2343f0", "record_id": "flaws_cloudtrail:0000542:c4be2061-f663-4e4d-93dc-baea4e2343f0", "row_index": 542, "timestamp": "2017-05-26T22:48:58Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAV7FKSJSLOMB7JW6F", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 982, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4be2061-f663-4e4d-93dc-baea4e2343f0", "eventTime": "2017-05-26T22:48:58Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAV7FKSJSLOMB7JW6F", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:51Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d532739-5b87-4468-afae-a82e55fba70a", "record_id": "flaws_cloudtrail:0000543:4d532739-5b87-4468-afae-a82e55fba70a", "row_index": 543, "timestamp": "2017-05-26T22:48:59Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAV7FKSJSLOMB7JW6F", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d532739-5b87-4468-afae-a82e55fba70a", "eventTime": "2017-05-26T22:48:59Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAV7FKSJSLOMB7JW6F", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:51Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "852f0868-312b-4945-b0df-02c98b591738", "record_id": "flaws_cloudtrail:0000544:852f0868-312b-4945-b0df-02c98b591738", "row_index": 544, "timestamp": "2017-05-26T22:49:00Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAV7FKSJSLOMB7JW6F", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "852f0868-312b-4945-b0df-02c98b591738", "eventTime": "2017-05-26T22:49:00Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAV7FKSJSLOMB7JW6F", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:51Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a480240a-b99f-4b5d-8a87-e050562d6579", "record_id": "flaws_cloudtrail:0000545:a480240a-b99f-4b5d-8a87-e050562d6579", "row_index": 545, "timestamp": "2017-05-26T22:49:01Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAV7FKSJSLOMB7JW6F", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a480240a-b99f-4b5d-8a87-e050562d6579", "eventTime": "2017-05-26T22:49:01Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAV7FKSJSLOMB7JW6F", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:51Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c116433d0-6261-4056-966b-2e489701d615", "record_id": "flaws_cloudtrail:0000546:c116433d0-6261-4056-966b-2e489701d615", "row_index": 546, "timestamp": "2017-05-26T22:49:02Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAV7FKSJSLOMB7JW6F", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c116433d0-6261-4056-966b-2e489701d615", "eventTime": "2017-05-26T22:49:02Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAV7FKSJSLOMB7JW6F", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:51Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "640b56ef-4798-46dd-8100-382713fdda013", "record_id": "flaws_cloudtrail:0000547:640b56ef-4798-46dd-8100-382713fdda013", "row_index": 547, "timestamp": "2017-05-26T22:49:02Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAV7FKSJSLOMB7JW6F", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 979, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "640b56ef-4798-46dd-8100-382713fdda013", "eventTime": "2017-05-26T22:49:02Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAV7FKSJSLOMB7JW6F", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:51Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e84092-fe15-42eb-a5ff-c9bb69e73cfd", "record_id": "flaws_cloudtrail:0000548:3e84092-fe15-42eb-a5ff-c9bb69e73cfd", "row_index": 548, "timestamp": "2017-05-26T22:49:02Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAV7FKSJSLOMB7JW6F", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e84092-fe15-42eb-a5ff-c9bb69e73cfd", "eventTime": "2017-05-26T22:49:02Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAV7FKSJSLOMB7JW6F", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:51Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5b0820b-cf3b-4658-9b0f-48f4ed67f0ee", "record_id": "flaws_cloudtrail:0000549:f5b0820b-cf3b-4658-9b0f-48f4ed67f0ee", "row_index": 549, "timestamp": "2017-05-26T22:49:03Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAV7FKSJSLOMB7JW6F", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 973, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5b0820b-cf3b-4658-9b0f-48f4ed67f0ee", "eventTime": "2017-05-26T22:49:03Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAV7FKSJSLOMB7JW6F", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:48:51Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20fc2035-dfad-4846-b094-536567300dd4", "record_id": "flaws_cloudtrail:0000550:20fc2035-dfad-4846-b094-536567300dd4", "row_index": 550, "timestamp": "2017-05-26T22:50:10Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIA9ZJX9RD4XNBCQNH0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "116.64.169.60", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 582, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20fc2035-dfad-4846-b094-536567300dd4", "eventTime": "2017-05-26T22:50:10Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "116.64.169.60", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIA9ZJX9RD4XNBCQNH0", "userName": "SecurityMokey"}, "requestParameters": {"userName": "SecurityMokey"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9f931e6-ff9d-47b8-ba6d-6dbbd0d47ade", "record_id": "flaws_cloudtrail:0000551:a9f931e6-ff9d-47b8-ba6d-6dbbd0d47ade", "row_index": 551, "timestamp": "2017-05-26T22:51:50Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": "ASIAO8MA6UJF8K96KCZD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9f931e6-ff9d-47b8-ba6d-6dbbd0d47ade", "eventTime": "2017-05-26T22:51:50Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIAO8MA6UJF8K96KCZD", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-05-26T16:12:49Z"}}}, "requestParameters": {"maxItems": 1000, "onlyAttached": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7bed7772-c801-483d-9c5d-e078f878fe92", "record_id": "flaws_cloudtrail:0000552:7bed7772-c801-483d-9c5d-e078f878fe92", "row_index": 552, "timestamp": "2017-05-26T22:53:34Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1455, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7bed7772-c801-483d-9c5d-e078f878fe92", "eventTime": "2017-05-26T22:53:34Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIADE9VBP52TVWSUN1C", "expiration": "May 26, 2017 11:53:34 PM", "sessionToken": "FQoDYXdzECAaDPPiRsQ32ad4yeOTniLMAR+mCD37WSZp3dGeKn35GveqI/yC+Z/VJOxeRTZX7F98d8DHGA4TWncQtB3YiF45M/6frMSzufnrZpTJ027LhkbktzBHNq/r0kf6s7jx5C9dRtvN8ARJXZQw2c6s2tR0FenVjI5RfJppz6byL7CdMkUWVi8cv3r0MIcE+k9tMgfdNNZWLPxOYlM6gpWqMy+ScOnrZB0Ge9QLsC4NjJaWve+okBkCoCrD1tVoT3kc/3C7+Kt1MK/CR8F4UfIFZgOLiMb1gNT+D4ahxO/3jCju46LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "756f491b-2057-4e28-b6f2-96ea4a83a990", "record_id": "flaws_cloudtrail:0000553:756f491b-2057-4e28-b6f2-96ea4a83a990", "row_index": 553, "timestamp": "2017-05-26T22:53:34Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "756f491b-2057-4e28-b6f2-96ea4a83a990", "eventTime": "2017-05-26T22:53:34Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAAKY7LSGKWXBIK8R3", "expiration": "May 26, 2017 11:53:34 PM", "sessionToken": "FQoDYXdzECAaDD9Xjl2jagrhm+G9ISLMAbbqc6Z8NRGYBF8PuYk4z3EMQ8xt3rCBZ42QqAcQRtXL34P+dLi8Xg6TMiO8H0ZEpVOmbXmfAkzRZ8V72kmzjEH0EmkDBu/VGflqSn2o833M3dk3CrsGGOuf5tRVOcMxk1LLq46d+CQ32yqHwcYTEaJ4lahrT/qOjEc1og0uL3Ag14JIyEnTw+qnIxrCuwR2U2UKZvqtEPjIEmuns5aP0ZJPZRA31aVoB+oDsqAtY7kvBF811b8k1X6bzxYKCGppcwvzl4RRTLM3VUkoPiju46LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ff91a6e-bfa7-4e84-80b3-44b0bb5966d2", "record_id": "flaws_cloudtrail:0000554:8ff91a6e-bfa7-4e84-80b3-44b0bb5966d2", "row_index": 554, "timestamp": "2017-05-26T22:53:34Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAAKY7LSGKWXBIK8R3", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1042, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ff91a6e-bfa7-4e84-80b3-44b0bb5966d2", "eventTime": "2017-05-26T22:53:34Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAAKY7LSGKWXBIK8R3", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:53:34Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4dcd688-63a8-41d4-ab17-4d58b5b5f966", "record_id": "flaws_cloudtrail:0000555:c4dcd688-63a8-41d4-ab17-4d58b5b5f966", "row_index": 555, "timestamp": "2017-05-26T22:53:34Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAAKY7LSGKWXBIK8R3", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4dcd688-63a8-41d4-ab17-4d58b5b5f966", "eventTime": "2017-05-26T22:53:34Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAAKY7LSGKWXBIK8R3", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:53:34Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "712d2d3f-c7d5-4d4c-8c0e-1e1c86e05e25", "record_id": "flaws_cloudtrail:0000556:712d2d3f-c7d5-4d4c-8c0e-1e1c86e05e25", "row_index": 556, "timestamp": "2017-05-26T22:53:35Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIADE9VBP52TVWSUN1C", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 976, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "712d2d3f-c7d5-4d4c-8c0e-1e1c86e05e25", "eventTime": "2017-05-26T22:53:35Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIADE9VBP52TVWSUN1C", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:53:34Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b43584-01d0-42aa-9239-86ae52077eed", "record_id": "flaws_cloudtrail:0000557:b43584-01d0-42aa-9239-86ae52077eed", "row_index": 557, "timestamp": "2017-05-26T22:53:35Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIADE9VBP52TVWSUN1C", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1041, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b43584-01d0-42aa-9239-86ae52077eed", "eventTime": "2017-05-26T22:53:35Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIADE9VBP52TVWSUN1C", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:53:34Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9660ec4-4d35-4d96-b11e-b94ec2651fd4", "record_id": "flaws_cloudtrail:0000558:c9660ec4-4d35-4d96-b11e-b94ec2651fd4", "row_index": 558, "timestamp": "2017-05-26T22:53:35Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9660ec4-4d35-4d96-b11e-b94ec2651fd4", "eventTime": "2017-05-26T22:53:35Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIASFE8M3KC29WJ0SA4", "expiration": "May 26, 2017 11:53:35 PM", "sessionToken": "FQoDYXdzECAaDBerr3aUrG4XNZdvYSLMAZ2qsxnQlgzq/huBimFQpWMKb2Yypy7zuqp/cT0BJ0NprMno+IdhOX1k5Wwhgy0sHUam0AYIAPbcWY50ERR2QnpmOrODzpQAT3tY9Ei2S6qBHwWhZHNfYLpgTXoyzFFZ2qjNcT6PBY/KNypWw/dS7z5AZsBpoUej8nhHCk8Rjk1oATKWmHy1MWc/UNuq/Clfy7IwZ1lP8CqVYpl+iFm916vh0X5YWUMl0i+qrExe8ajgsIZnT8TX+FPT8rnequVKJdEgsAiisKXRRyjIvyjv46LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01a734da-ca50-43f4-b2d9-317a620b46d3", "record_id": "flaws_cloudtrail:0000559:01a734da-ca50-43f4-b2d9-317a620b46d3", "row_index": 559, "timestamp": "2017-05-26T22:53:36Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIASFE8M3KC29WJ0SA4", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1047, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01a734da-ca50-43f4-b2d9-317a620b46d3", "eventTime": "2017-05-26T22:53:36Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIASFE8M3KC29WJ0SA4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:53:35Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fca4020e-b5b3-4403-a7a2-ca8fb8c2bc1d", "record_id": "flaws_cloudtrail:0000560:fca4020e-b5b3-4403-a7a2-ca8fb8c2bc1d", "row_index": 560, "timestamp": "2017-05-26T22:53:36Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIASFE8M3KC29WJ0SA4", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 982, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fca4020e-b5b3-4403-a7a2-ca8fb8c2bc1d", "eventTime": "2017-05-26T22:53:36Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIASFE8M3KC29WJ0SA4", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:53:35Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1249a6c-b74f-4732-946a-728b7cc5e586", "record_id": "flaws_cloudtrail:0000561:f1249a6c-b74f-4732-946a-728b7cc5e586", "row_index": 561, "timestamp": "2017-05-26T22:53:36Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIA9ZJX9RD4XNBCQNH0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "116.64.169.60", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:s3:::prod-data-8997"], "raw_record_size_bytes": 662, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1249a6c-b74f-4732-946a-728b7cc5e586", "eventTime": "2017-05-26T22:53:36Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "116.64.169.60", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIA9ZJX9RD4XNBCQNH0", "userName": "SecurityMokey"}, "requestParameters": {"bucketName": "prod-data-8997", "key": "reports/172.csv"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-8997"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e57db8c-fe48-4101-a2a2-1bf6334fa5c7", "record_id": "flaws_cloudtrail:0000562:7e57db8c-fe48-4101-a2a2-1bf6334fa5c7", "row_index": 562, "timestamp": "2017-05-26T22:53:37Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1452, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e57db8c-fe48-4101-a2a2-1bf6334fa5c7", "eventTime": "2017-05-26T22:53:37Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAIC9DL3YF6M1SZPQG", "expiration": "May 26, 2017 11:53:37 PM", "sessionToken": "FQoDYXdzECAaDPaqieD8FJXSPCTV4iLMAeF1mpOUYqveJjS+wI46X3kGD7ytmWuATfFeyQpnkyEQKy3fn7fWsO0/AAu1N0gz5HHlRcIZ9fiVWUludKrZ3oZjpPdZFjuT4YkMmEYk5TxMYvEJ35+2DGAwkNxSWBg2aUym8Hj5srGG0/yHAR7v3twhHTyizsoM5JDRHwsBXthpbZ0CBvJlHl5TQE9gtrkGqv13zZXwaotV2y/bQpzTALv4RsaeTFtdKlRNTal44BcqQOlkl7HKhVNdE7iDF2Rx1ng85zWqc2j7MI5FuCjx46LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34536-90e2-479c-af68-2985f055143a9", "record_id": "flaws_cloudtrail:0000563:34536-90e2-479c-af68-2985f055143a9", "row_index": 563, "timestamp": "2017-05-26T22:53:38Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAIC9DL3YF6M1SZPQG", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34536-90e2-479c-af68-2985f055143a9", "eventTime": "2017-05-26T22:53:38Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAIC9DL3YF6M1SZPQG", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:53:37Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a59e2f6-05c2-4b71-bdf7-1aa5ff1c14f8", "record_id": "flaws_cloudtrail:0000564:0a59e2f6-05c2-4b71-bdf7-1aa5ff1c14f8", "row_index": 564, "timestamp": "2017-05-26T22:53:38Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAIC9DL3YF6M1SZPQG", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1047, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a59e2f6-05c2-4b71-bdf7-1aa5ff1c14f8", "eventTime": "2017-05-26T22:53:38Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAIC9DL3YF6M1SZPQG", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:53:37Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4dea7143-4bcd-44a2-81b0-e2048ea1726e", "record_id": "flaws_cloudtrail:0000565:4dea7143-4bcd-44a2-81b0-e2048ea1726e", "row_index": 565, "timestamp": "2017-05-26T22:53:39Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAY0FTW411NDF3Z24R", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4dea7143-4bcd-44a2-81b0-e2048ea1726e", "eventTime": "2017-05-26T22:53:39Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAY0FTW411NDF3Z24R", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:53:39Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "deb659908-678c-4c5e-a832-e5d67941b6f9", "record_id": "flaws_cloudtrail:0000566:deb659908-678c-4c5e-a832-e5d67941b6f9", "row_index": 566, "timestamp": "2017-05-26T22:53:39Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1455, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "deb659908-678c-4c5e-a832-e5d67941b6f9", "eventTime": "2017-05-26T22:53:39Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAY0FTW411NDF3Z24R", "expiration": "May 26, 2017 11:53:39 PM", "sessionToken": "FQoDYXdzECAaDFTRNG9oPzvkWxA/yiLMARdl3XTu9B1zwl7u82WpK2muWWwvU2BcozOLyLqLl2yOHN/9OdcxejSEsPhONgZtqlsld2YI91yphvk9Qx4i2HeyNwsh3+Rmc81OGCweUwTlxwITw1Hh0V/0lZB/NugmRk9/05rwMlerOVAf4kOEB9ddy5p3BhQTmdi7kvvH67LJrrfYASYpOwNWET8LK9wgM7PlWZqVxBBBiEilUmfr+IfRje6PD38qhfvVlYPazWyCQ1IUPL5342laJXWb1gxGmn45k28v8BSOtgKbeSjz46LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f12449d8-0fe1-4e47-b9a1-948a77595f4b", "record_id": "flaws_cloudtrail:0000567:f12449d8-0fe1-4e47-b9a1-948a77595f4b", "row_index": 567, "timestamp": "2017-05-26T22:53:40Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAY0FTW411NDF3Z24R", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1042, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f12449d8-0fe1-4e47-b9a1-948a77595f4b", "eventTime": "2017-05-26T22:53:40Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAY0FTW411NDF3Z24R", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:53:39Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5639a7c4-ef1c-4786-8f65-89e5a026e9d2", "record_id": "flaws_cloudtrail:0000568:5639a7c4-ef1c-4786-8f65-89e5a026e9d2", "row_index": 568, "timestamp": "2017-05-26T22:53:40Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1455, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5639a7c4-ef1c-4786-8f65-89e5a026e9d2", "eventTime": "2017-05-26T22:53:40Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAJ37IPH1TVNE5DYNR", "expiration": "May 26, 2017 11:53:40 PM", "sessionToken": "FQoDYXdzECAaDFTBF0Qtij5MQm3j5yLMAafpGIhIpzp3DGceXYVlyprp7bxOrVPFh/iNrYwOABBe5/CsXEFvyN8BIvsEwEepdYEMdq+L8ZDHzi6n66Wvn/LIPo+thRjJc2OF+ze64xO6yWsmAjSYs7yTLsMB/3T1v0/15mihW+qeM5Q4XvNssix2xeaU+Qs3B/V9S/1KZKXyOZPtPtMmxuz728+GonCn9EfCaS0UM5DkzADw0RfAK1PYNjOx4QwGLNGYNmR7xaMRQiswyel5o6ZMqMLAamlzK1sFYslm4pSpfqI9eyj046LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20250fbe-55d2-4eee-b7ac-06ac88dee26d", "record_id": "flaws_cloudtrail:0000569:20250fbe-55d2-4eee-b7ac-06ac88dee26d", "row_index": 569, "timestamp": "2017-05-26T22:53:41Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAJ37IPH1TVNE5DYNR", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 982, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20250fbe-55d2-4eee-b7ac-06ac88dee26d", "eventTime": "2017-05-26T22:53:41Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAJ37IPH1TVNE5DYNR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:53:40Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92abf961-7f98-4521-b4cb-bd248c57e644", "record_id": "flaws_cloudtrail:0000570:92abf961-7f98-4521-b4cb-bd248c57e644", "row_index": 570, "timestamp": "2017-05-26T22:53:41Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAJ37IPH1TVNE5DYNR", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1047, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92abf961-7f98-4521-b4cb-bd248c57e644", "eventTime": "2017-05-26T22:53:41Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAJ37IPH1TVNE5DYNR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:53:40Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71de0f93-d3ec-4207-9084-63b17df62a97", "record_id": "flaws_cloudtrail:0000571:71de0f93-d3ec-4207-9084-63b17df62a97", "row_index": 571, "timestamp": "2017-05-26T22:53:42Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71de0f93-d3ec-4207-9084-63b17df62a97", "eventTime": "2017-05-26T22:53:42Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA2JO5OGJGJ58I6VJB", "expiration": "May 26, 2017 11:53:42 PM", "sessionToken": "FQoDYXdzECAaDDbTFeCoV6QJHD/D3iLMAWEELpHf/UcucNYPt4Ql89xxWt4tszEUJEPAyKWgx4bp2QT5YDJlGvjuWfOZEcSZiRH/bzmtTrFtFKJ4BqHT4+EE9AaOsVtWO9OF3aTg0Kn1YSTdvnfIsUdNf7E7a6gTY6wd62JZelc/ApP8CiI/mLgutsdU506k3Lw0yKxrg5IIF1ROTx6+bAtOi4DnwZLmZhfvXxzL3KNT3DvCWUYAp77kFV675FQk7Kz64U+xcX9RHwi2nDDFW8q4wZQ++Pcrn8aonM3Nejw7X1Ky3ij246LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f918c2fc-79bb-4ae3-8418-ab8f1adcf13a", "record_id": "flaws_cloudtrail:0000572:f918c2fc-79bb-4ae3-8418-ab8f1adcf13a", "row_index": 572, "timestamp": "2017-05-26T22:53:42Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f918c2fc-79bb-4ae3-8418-ab8f1adcf13a", "eventTime": "2017-05-26T22:53:42Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIA16ISET1E5006LYAE", "expiration": "May 26, 2017 11:53:42 PM", "sessionToken": "FQoDYXdzECAaDNz/OQZUmOcYzRCfZSLMAVe5DAcy6q1KZRzF9ujE/XC1o6RPJ6I6FZpHYDTmTXQcl5R5R4ekj9tWdvQmnnuwKgNHowH7GDtDEjZttWw5JqI+PpyIKi3+Bn83Zv7G728zyZb0JOJyqnvY6Mg5tZpptUoYB4mHJTxb0DFclSlK7FghzOEbN8ea7T4nEgwN8QwaBJgA9phWPAiRiIS9VfSXpjeFHahvE6f1cPD5JXUCQAj5BOXeXadKhA8CWhooDA6TLKTo83/N5qmIMAub0Gy71RR+/zNlOvtdTZgbZCj246LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef1466ac-d20b-45a6-a383-51c18c52971a", "record_id": "flaws_cloudtrail:0000573:ef1466ac-d20b-45a6-a383-51c18c52971a", "row_index": 573, "timestamp": "2017-05-26T22:53:42Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA2JO5OGJGJ58I6VJB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1042, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef1466ac-d20b-45a6-a383-51c18c52971a", "eventTime": "2017-05-26T22:53:42Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA2JO5OGJGJ58I6VJB", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:53:42Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c78f01f2-9748-412b-9d1a-5f8fa09eaa81", "record_id": "flaws_cloudtrail:0000574:c78f01f2-9748-412b-9d1a-5f8fa09eaa81", "row_index": 574, "timestamp": "2017-05-26T22:53:42Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA2JO5OGJGJ58I6VJB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c78f01f2-9748-412b-9d1a-5f8fa09eaa81", "eventTime": "2017-05-26T22:53:42Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA2JO5OGJGJ58I6VJB", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:53:42Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51cb7cdd-8bab-4b17-8771-f39fd64c1c9a", "record_id": "flaws_cloudtrail:0000575:51cb7cdd-8bab-4b17-8771-f39fd64c1c9a", "row_index": 575, "timestamp": "2017-05-26T22:53:44Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA16ISET1E5006LYAE", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 982, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51cb7cdd-8bab-4b17-8771-f39fd64c1c9a", "eventTime": "2017-05-26T22:53:44Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA16ISET1E5006LYAE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:53:42Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "424cd9d2-e27d-42d1-b5bc-b26f1dbd2e18", "record_id": "flaws_cloudtrail:0000576:424cd9d2-e27d-42d1-b5bc-b26f1dbd2e18", "row_index": 576, "timestamp": "2017-05-26T22:53:44Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIA16ISET1E5006LYAE", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1047, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "424cd9d2-e27d-42d1-b5bc-b26f1dbd2e18", "eventTime": "2017-05-26T22:53:44Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIA16ISET1E5006LYAE", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:53:42Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c636986b-961b-4300-bbb1-d008511b0b90", "record_id": "flaws_cloudtrail:0000577:c636986b-961b-4300-bbb1-d008511b0b90", "row_index": 577, "timestamp": "2017-05-26T22:53:44Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1455, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c636986b-961b-4300-bbb1-d008511b0b90", "eventTime": "2017-05-26T22:53:44Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAYPTPHMXU9A98TDSX", "expiration": "May 26, 2017 11:53:44 PM", "sessionToken": "FQoDYXdzECAaDKZw/DBmDwB7hqqKNiLMAUc8aLSb46Q+Brz+M5zLxTEP1dFaSbZFNMh7cL0garkDdT46Jc+E+QNLHzUyZGYkcWvLgkCj0rBy8Mm2Q6DegoW6c30UnSCVjz5+2Kjt5X2cMQ6zAy19l6MvVC22ItV9Qdig2dZq0knN2WobPKsbVkaYY+/SyEPnOg5i3rDGWObOwuI1uEnqpbQxnwAbFCMO+KO2fjEMmOOZtI7WOA976GOhJeArqX+mSndWoDUXOdNasf3ZKRqTiGX26h7llYiTAbSHMkKyHBQr+l65yCj446LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a38391d7-59cf-4593-acce-2c93cf7ad137", "record_id": "flaws_cloudtrail:0000578:a38391d7-59cf-4593-acce-2c93cf7ad137", "row_index": 578, "timestamp": "2017-05-26T22:53:45Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAYPTPHMXU9A98TDSX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a38391d7-59cf-4593-acce-2c93cf7ad137", "eventTime": "2017-05-26T22:53:45Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAYPTPHMXU9A98TDSX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:53:44Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "063ffb49-9f57-48e2-86ff-04b39f99bbab", "record_id": "flaws_cloudtrail:0000579:063ffb49-9f57-48e2-86ff-04b39f99bbab", "row_index": 579, "timestamp": "2017-05-26T22:53:45Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAYPTPHMXU9A98TDSX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1045, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "063ffb49-9f57-48e2-86ff-04b39f99bbab", "eventTime": "2017-05-26T22:53:45Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAYPTPHMXU9A98TDSX", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:53:44Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "597eff55-fcc1-4c28-a276-c96638fca28", "record_id": "flaws_cloudtrail:0000580:597eff55-fcc1-4c28-a276-c96638fca28", "row_index": 580, "timestamp": "2017-05-26T22:53:45Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "597eff55-fcc1-4c28-a276-c96638fca28", "eventTime": "2017-05-26T22:53:45Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAW5654DMPNT21G1P2", "expiration": "May 26, 2017 11:53:45 PM", "sessionToken": "FQoDYXdzECAaDFjn9WBkZCfotaZ1ySLMAZFPKRl7F5SfMGYrkPqnHSaSS5+21PRnmZB3LJMtTZOcIxtTCzQttQf3ZBNeUlSXPyQeTznTIaZOoQe3PdiMlGB52G7rRzo1/Ktg7yZ+A5T9tSVyex0uDSRo655MHct97inxltGgk1dbfioI8K9KduUgvCgQgTj/lnM+JR+HU27Ti4FvSUD+Q9XCY9LEnb2tKvNiJT900mB8rng4AA2O3zQhQU0Kd/y9nnQMOTdv95l8xW3ybse7NYg4smQrxPslhFbIpGySPTjXRBDNRCj546LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ae19dc6-1b0c-4356-98ef-dc37e3cec7b9", "record_id": "flaws_cloudtrail:0000581:5ae19dc6-1b0c-4356-98ef-dc37e3cec7b9", "row_index": 581, "timestamp": "2017-05-26T22:53:47Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1453, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ae19dc6-1b0c-4356-98ef-dc37e3cec7b9", "eventTime": "2017-05-26T22:53:47Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAKQHUNQVX2MNR9YWC", "expiration": "May 26, 2017 11:53:47 PM", "sessionToken": "FQoDYXdzECAaDFZfZM1b8/wKXvrlliLMAf76gdw0qTe6xYCyfLog7wpNOVvnIYiCLXdxG13tiuBKN6pMxyoeQaizwnvaaMk89ArQn8Eyx9xwa1hkrycYA2HVf5MnGJkX4Ea+o6dSGTVqczvqRCv/BoPCCy3uS/+g0DPHKj1U1Y+j4zpMZ9yEVhF7wxBdSoS9drjTptMbZHUqF/AZNkRaFzCGGQ3MYp+um07w/36vWvqPq62IGs+dSTSmns0hRQibHmz22V47cggdPbwCpHU/lFHA3XoJjj3EO5VDuK9TzFtWkHC6Cyj746LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "307259c9-f2f1-4fdb-83f4-9eebb5a326879", "record_id": "flaws_cloudtrail:0000582:307259c9-f2f1-4fdb-83f4-9eebb5a326879", "row_index": 582, "timestamp": "2017-05-26T22:53:48Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1455, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "307259c9-f2f1-4fdb-83f4-9eebb5a326879", "eventTime": "2017-05-26T22:53:48Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAV1X4BYFG7EN7DIE4", "expiration": "May 26, 2017 11:53:48 PM", "sessionToken": "FQoDYXdzECAaDJSpYuGp0vDowB5+viLMAdjzsAkWtiYeblFGXT77fJPgxwlF6v2FPIP31N3XjU6aKcprI3YcZfINSoMm+81AkX9i7zlaWND8BOnO7S9AzOudMktOsNCLhziq+QkrmTEUU+JPVa0qCk4VSHvzqwwZC+qJ8UDSSgubqk3mGv5BoxM9OLcwtnJsbAvcL2+0myG011DFg5T4bZPFNHmTQ9ON12at9nT2PPd7Tmp5eYS/ccbxJDbdqpv6kzSPE0zUyF5fQDll/Mwv3zo3dNgdoH7eL/A/b5YLhPWT8CyEqij846LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbec05bc-8632-4d67-a9bd-5858bce2cbd9", "record_id": "flaws_cloudtrail:0000583:fbec05bc-8632-4d67-a9bd-5858bce2cbd9", "row_index": 583, "timestamp": "2017-05-26T22:53:48Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAKQHUNQVX2MNR9YWC", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1042, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbec05bc-8632-4d67-a9bd-5858bce2cbd9", "eventTime": "2017-05-26T22:53:48Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAKQHUNQVX2MNR9YWC", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:53:47Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "608658da8-223a-40ff-8f6a-8343e20b642a", "record_id": "flaws_cloudtrail:0000584:608658da8-223a-40ff-8f6a-8343e20b642a", "row_index": 584, "timestamp": "2017-05-26T22:53:48Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAKQHUNQVX2MNR9YWC", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "608658da8-223a-40ff-8f6a-8343e20b642a", "eventTime": "2017-05-26T22:53:48Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAKQHUNQVX2MNR9YWC", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:53:47Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff91a699-6db4-48ab-a872-5bcced8c354a", "record_id": "flaws_cloudtrail:0000585:ff91a699-6db4-48ab-a872-5bcced8c354a", "row_index": 585, "timestamp": "2017-05-26T22:53:49Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff91a699-6db4-48ab-a872-5bcced8c354a", "eventTime": "2017-05-26T22:53:49Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAEJJPX8BFHR5CPM3F", "expiration": "May 26, 2017 11:53:49 PM", "sessionToken": "FQoDYXdzECAaDH9DX1ZA2dqetz9akSLMAdWBEFoIK9gFPhwuZAsxJX/9zz4HPVu4e5rWUq8Fw2xiEfyq6UW+tn2Ii5eA1iXHgmlChmoZ5DL0bWA/sOs5AV2eiK29C9yYSd9/qy4a7RtRXjnme+E2AP5gSkYpDwHAzDOqhz0LmGOqD6WIvnQCZhBLaDQVEWDbmmBapFSHcbkdlsnqeDNzjBwpVTeQ7l5jzrBdVfkYQR+m85se4Esp8r//GCqUnvhUvBO9TQ0Q/mtjWR+5IBsVvu3d4iAl2HN4IAGfAOLy7ciZ/FmTNSj946LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dbabd1f1-df3c-438d-b8be-2879b9cfd32b", "record_id": "flaws_cloudtrail:0000586:dbabd1f1-df3c-438d-b8be-2879b9cfd32b", "row_index": 586, "timestamp": "2017-05-26T22:53:50Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAEJJPX8BFHR5CPM3F", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dbabd1f1-df3c-438d-b8be-2879b9cfd32b", "eventTime": "2017-05-26T22:53:50Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAEJJPX8BFHR5CPM3F", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:53:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6fcff0f-72a1-451d-a683-36fb15c8b27c", "record_id": "flaws_cloudtrail:0000587:b6fcff0f-72a1-451d-a683-36fb15c8b27c", "row_index": 587, "timestamp": "2017-05-26T22:53:50Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAEJJPX8BFHR5CPM3F", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1042, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6fcff0f-72a1-451d-a683-36fb15c8b27c", "eventTime": "2017-05-26T22:53:50Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAEJJPX8BFHR5CPM3F", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:53:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d83d8d5f-6c76-4839-9d30-baf3a8aed95c", "record_id": "flaws_cloudtrail:0000588:d83d8d5f-6c76-4839-9d30-baf3a8aed95c", "row_index": 588, "timestamp": "2017-05-26T22:53:51Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAA0MFQUN2LGFFQ8GK", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 980, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d83d8d5f-6c76-4839-9d30-baf3a8aed95c", "eventTime": "2017-05-26T22:53:51Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAA0MFQUN2LGFFQ8GK", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:53:51Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d2d8dff-b9d4-439c-a84f-9abde0eccb69", "record_id": "flaws_cloudtrail:0000589:3d2d8dff-b9d4-439c-a84f-9abde0eccb69", "row_index": 589, "timestamp": "2017-05-26T22:53:51Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d2d8dff-b9d4-439c-a84f-9abde0eccb69", "eventTime": "2017-05-26T22:53:51Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAA0MFQUN2LGFFQ8GK", "expiration": "May 26, 2017 11:53:51 PM", "sessionToken": "FQoDYXdzECAaDECeN5iSSAbHNW4YxyLMAVU6EVvRU/0XeZV9yXh0LmHgLK/pO6C8rqQlaQrVjoTMicOlvD1CCrO2Rh6RMsry/iCHWyk+8pEYHzKvR0V2Em1gyhYuhL6WYCoQVeuZnFiWQWf5dlVNBDJNItIebykBObLfSLhDRewxF6he7Mz1aTNcdCw4h3K3F0CBE3HOQ+6rHfFod8JVEnqzIxVKO8SqhhucUjXazy2dDNDxAUVT9ISEAKtsixGyabpNdiF6Y8+Xfs8gNXwVV+1NuCimnbzr0j+k4sT2cBOTgmS4Xyj/46LJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d919a6b8-d957-4598-b09b-ee216d3182de", "record_id": "flaws_cloudtrail:0000590:d919a6b8-d957-4598-b09b-ee216d3182de", "row_index": 590, "timestamp": "2017-05-26T22:53:52Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAA0MFQUN2LGFFQ8GK", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1046, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d919a6b8-d957-4598-b09b-ee216d3182de", "eventTime": "2017-05-26T22:53:52Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAA0MFQUN2LGFFQ8GK", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:53:51Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95048dc0-53fc-4977-84f4-ee699685a3f96", "record_id": "flaws_cloudtrail:0000591:95048dc0-53fc-4977-84f4-ee699685a3f96", "row_index": 591, "timestamp": "2017-05-26T22:53:52Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1455, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95048dc0-53fc-4977-84f4-ee699685a3f96", "eventTime": "2017-05-26T22:53:52Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAB89HZTHND19BEDOG", "expiration": "May 26, 2017 11:53:52 PM", "sessionToken": "FQoDYXdzECAaDKKXofMjUB5A4xay8yLMAdQdgU0VkAg50pStUg2Cs14KLOdvMtJ/B0Jyo+tTTRr14LsGVKVphuw7h/ylqTxgy06hxmJnxYTHQGYEdtmRSrP8RppGlUkZ10ihSUufcSIT6PdlKI/ROBfzddEOFSrgj3AHfXZyXK991PLp64DmmSeu7h/TSNBecy6IRrh7KDJ4tS7kJS2DZA0VS3izQ36qwhpKJi/JN7PiVDQWTqmc0H0tK0NEurtR/rbNnXMg9fGWg6NpOUTNK9W559yh9hDF2Hu5wR3wk87JMBkYuyiA5KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0c76ef9-b420-41ed-b613-1f84f190d455", "record_id": "flaws_cloudtrail:0000592:c0c76ef9-b420-41ed-b613-1f84f190d455", "row_index": 592, "timestamp": "2017-05-26T22:53:53Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAB89HZTHND19BEDOG", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 977, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0c76ef9-b420-41ed-b613-1f84f190d455", "eventTime": "2017-05-26T22:53:53Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAB89HZTHND19BEDOG", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:53:52Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b5e5967-7c3c-476b-bf80-dab112568c5d7", "record_id": "flaws_cloudtrail:0000593:6b5e5967-7c3c-476b-bf80-dab112568c5d7", "row_index": 593, "timestamp": "2017-05-26T22:53:53Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAB89HZTHND19BEDOG", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1043, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b5e5967-7c3c-476b-bf80-dab112568c5d7", "eventTime": "2017-05-26T22:53:53Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAB89HZTHND19BEDOG", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:53:52Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2664c28-73d2-4517-b466-8ceaeb6e2ce1", "record_id": "flaws_cloudtrail:0000594:a2664c28-73d2-4517-b466-8ceaeb6e2ce1", "row_index": 594, "timestamp": "2017-05-26T22:53:53Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2664c28-73d2-4517-b466-8ceaeb6e2ce1", "eventTime": "2017-05-26T22:53:53Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAJ419L6WPVVGOOUDN", "expiration": "May 26, 2017 11:53:53 PM", "sessionToken": "FQoDYXdzECAaDKyAFioWPx0YsobRoiLMAXXCNdpMZyjZPLnvYXdLkWtvVNEmuipq+FseMYWw+u93iiN43AYb5RwD1PDGO/QWrBXvIc/RSw0ROGDqw6krRFpq8G5mfq6ixM4ypowQcInjNmleyeVJd4XGDAkClfgHCItDDEgJwrdGMR5WF3stbGSJ4LMmUHy0s1aHvJYdFBjyt3Cd7tVpcPDjPRAyaKQrWkzU3h4RL40pyTMbz0NbKR7Zb9E+AYW3CE33BgG6ux/t1CKsmnNzvqXLB7gJb2apkbD9NMeE+uXcGlUy+iiB5KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8349d44a-8c29-4843-8880-0e896ed487605", "record_id": "flaws_cloudtrail:0000595:8349d44a-8c29-4843-8880-0e896ed487605", "row_index": 595, "timestamp": "2017-05-26T22:53:54Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAJ419L6WPVVGOOUDN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8349d44a-8c29-4843-8880-0e896ed487605", "eventTime": "2017-05-26T22:53:54Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAJ419L6WPVVGOOUDN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:53:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "724b4b49-28ca-404d-975c-868368d4f386", "record_id": "flaws_cloudtrail:0000596:724b4b49-28ca-404d-975c-868368d4f386", "row_index": 596, "timestamp": "2017-05-26T22:53:54Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAJ419L6WPVVGOOUDN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1042, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "724b4b49-28ca-404d-975c-868368d4f386", "eventTime": "2017-05-26T22:53:54Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAJ419L6WPVVGOOUDN", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:53:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cef29f63-1cab-43b3-b992-969f83a7b9a1", "record_id": "flaws_cloudtrail:0000597:cef29f63-1cab-43b3-b992-969f83a7b9a1", "row_index": 597, "timestamp": "2017-05-26T22:53:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIA9ZJX9RD4XNBCQNH0", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "116.64.169.60", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMokey-elevated-26"], "raw_record_size_bytes": 750, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cef29f63-1cab-43b3-b992-969f83a7b9a1", "eventTime": "2017-05-26T22:53:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "116.64.169.60", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIA9ZJX9RD4XNBCQNH0", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMokey-elevated-26", "roleSessionName": "SecurityMokey-session"}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMokey-elevated-26"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c87dce1-3fcc-4d3c-a454-e85d0c6a237e", "record_id": "flaws_cloudtrail:0000598:0c87dce1-3fcc-4d3c-a454-e85d0c6a237e", "row_index": 598, "timestamp": "2017-05-26T22:53:55Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIADWJB2TC8QU39A1NP", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 968, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c87dce1-3fcc-4d3c-a454-e85d0c6a237e", "eventTime": "2017-05-26T22:53:55Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto/2.47.0 Python/2.7.12 Linux/4.4.0-78-generic", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIADWJB2TC8QU39A1NP", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:53:55Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60411-669a-40f0-a8ed-7b3fdf7de454", "record_id": "flaws_cloudtrail:0000599:60411-669a-40f0-a8ed-7b3fdf7de454", "row_index": 599, "timestamp": "2017-05-26T22:53:55Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1450, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60411-669a-40f0-a8ed-7b3fdf7de454", "eventTime": "2017-05-26T22:53:55Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIADWJB2TC8QU39A1NP", "expiration": "May 26, 2017 11:53:55 PM", "sessionToken": "FQoDYXdzECAaDKO1Tfy52MWcBnGu8CLMAXWw9A575zJoycpxiQVmj1roYJJSC2AbdTy7aX45u46/1kJkMG6KZvoDgf+b+iPojZQuRXjq7yIO+smyEm5c0kE42Q264KaY9WG4QOjcd81x1942vyJRPdaCjKkNFXBWkoS1+rEEg73gR3tOXBELY0ZjEHQQrvwLmHIdXQ+FE2wTiQr3Aao7qX0xCN5RMbb/3q5EDSj1iu+mqHL/p3WeCYoTcol9S3Vkx8KRd9bpBRIwO5SV2ZHXjEoB9jO9HVllx/bYZESWMZTj+v7d9yiD5KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b72af57-0b0b-480f-866f-a91984c45e86", "record_id": "flaws_cloudtrail:0000600:1b72af57-0b0b-480f-866f-a91984c45e86", "row_index": 600, "timestamp": "2017-05-26T22:53:55Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1450, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b72af57-0b0b-480f-866f-a91984c45e86", "eventTime": "2017-05-26T22:53:55Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIADI4WR2J81NKRKMNW", "expiration": "May 26, 2017 11:53:55 PM", "sessionToken": "FQoDYXdzECAaDHLUvNY0r4A6nlO+UCLMAcxSPGjhH9wCV7e1+reYBiOHfdsez2O4S46jw4znGU4YPLGsCK5NCV8OUMQR0XKL4g2M/IzcYAXfQJApFM+j3HPAqjX+WwGMbslQDE17PpRwclGg7jTgr66/rgMm/F/9JXTN9tDcuRKqsjd5ys/nmjygLue+1zSZ6EDgXLXnyB+7VFgVnhUyU1mqivkOeNcaVm/c757xDIjBJEs+/7UHppjcHxgs9PgJEau9jLtH3oVIValI4KKBJTGNSP5bkpI2ginEykT48FSWE1qKSSiD5KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14e9116a-eba0-4110-a3b7-c7f4b8e4157d", "record_id": "flaws_cloudtrail:0000601:14e9116a-eba0-4110-a3b7-c7f4b8e4157d", "row_index": 601, "timestamp": "2017-05-26T22:53:57Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIADI4WR2J81NKRKMNW", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1138, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14e9116a-eba0-4110-a3b7-c7f4b8e4157d", "eventTime": "2017-05-26T22:53:57Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey is not authorized to perform: acm:ListCertificates", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIADI4WR2J81NKRKMNW", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:53:55Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf5c87b3-0f89-482c-9114-d74de9873be0", "record_id": "flaws_cloudtrail:0000602:cf5c87b3-0f89-482c-9114-d74de9873be0", "row_index": 602, "timestamp": "2017-05-26T22:53:57Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1454, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf5c87b3-0f89-482c-9114-d74de9873be0", "eventTime": "2017-05-26T22:53:57Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIACPWQF97U0PTMHBAS", "expiration": "May 26, 2017 11:53:57 PM", "sessionToken": "FQoDYXdzECAaDFufD4VY2VfWduucyyLMAT8+/U37i5X0lB97LPC9fvMTiYe2RpNhYx5b1fBRfVmP5kOTnB5MnU0pFsEWTH+3aUSwv5IWNxBHAXlznO7FsfbXecBk/y0Z1aHbyKKy+z0u4RRoWEyFYMvxfmiB6BF7vGNs1oR0soiZIj+4Pv2PmP5110OhufBpCW/wzndDnt3s4Nt3yHij1CfNg0qFncFoKf9fTv7DO+9f2sO1hOQ8F/fbYdY7rAfhnHbpP3qT0Ai/pBUTdpdB7w/ZVMp0A6yxbuws6IdgZRqqGP5g1yiF5KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74f310846-c064-4cbc-9218-30f58f563b98", "record_id": "flaws_cloudtrail:0000603:74f310846-c064-4cbc-9218-30f58f563b98", "row_index": 603, "timestamp": "2017-05-26T22:53:58Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIACPWQF97U0PTMHBAS", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1138, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74f310846-c064-4cbc-9218-30f58f563b98", "eventTime": "2017-05-26T22:53:58Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey is not authorized to perform: acm:ListCertificates", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIACPWQF97U0PTMHBAS", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:53:57Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5baf4c78-970c-4cb0-9c4f-78add0392667", "record_id": "flaws_cloudtrail:0000604:5baf4c78-970c-4cb0-9c4f-78add0392667", "row_index": 604, "timestamp": "2017-05-26T22:53:58Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "account_id": "811596193553", "principal_id": "AIDAQ9SRE1SZZZ4Q4UOJH", "user_name": "SecurityMokey", "access_key_id": "AKIAXJ0III4JBKZDXGXN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SecurityMonkey"], "raw_record_size_bytes": 1450, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5baf4c78-970c-4cb0-9c4f-78add0392667", "eventTime": "2017-05-26T22:53:58Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDAQ9SRE1SZZZ4Q4UOJH", "arn": "arn:aws:iam::811596193553:user/SecurityMokey", "accountId": "811596193553", "accessKeyId": "AKIAXJ0III4JBKZDXGXN", "userName": "SecurityMokey"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SecurityMonkey", "roleSessionName": "secmonkey"}, "responseElements": {"credentials": {"accessKeyId": "ASIAAJ7BIXO3UZKLB2QG", "expiration": "May 26, 2017 11:53:58 PM", "sessionToken": "FQoDYXdzECAaDEN79+EC00IyPPh5uiLMAelhvnq3WHtowvRIqNQ9WryXIFcCzKSAFiSeqlk1HCFWN8ZZIHIlkBYm8txU2ZEm1K3i3hVPwUa97ckZKiZdhXHvQ8l+L1L850bIOusKgHtkcNeVm9VemA4i6idXwsxyJl7lkVbuZl1fIuKcc/v2WKnk1M+8yJ+c+6Wt1UGWmsTYgdFUnSpKK/u1NoNN1jeBSJ8Eow5rjYVjz0JXphsk4dxkZGV3TLk6RZWjCiZz/1IABNo1fs/lcIukUs/32XcHHf3qs0TCsypC1iaX1iiG5KLJBQ=="}, "assumedRoleUser": {"assumedRoleId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "642d575a-2bb7-4cc5-b32b-f1ae96e9734a", "record_id": "flaws_cloudtrail:0000605:642d575a-2bb7-4cc5-b32b-f1ae96e9734a", "row_index": 605, "timestamp": "2017-05-26T22:53:59Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "account_id": "811596193553", "principal_id": "AROAUB2AA5FQRGAHITW4A:secmonkey", "user_name": null, "access_key_id": "ASIAAJ7BIXO3UZKLB2QG", "session_issuer_arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "session_issuer_user_name": "SecurityMonkey"}, "network": {"source_ip": "255.253.125.115", "user_agent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1137, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "642d575a-2bb7-4cc5-b32b-f1ae96e9734a", "eventTime": "2017-05-26T22:53:59Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "Boto3/1.4.4 Python/2.7.12 Linux/4.4.0-78-generic Botocore/1.5.56", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey is not authorized to perform: acm:ListCertificates", "userIdentity": {"type": "AssumedRole", "principalId": "AROAUB2AA5FQRGAHITW4A:secmonkey", "arn": "arn:aws:sts::811596193553:assumed-role/SecurityMonkey/secmonkey", "accountId": "811596193553", "accessKeyId": "ASIAAJ7BIXO3UZKLB2QG", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-05-26T22:53:58Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAUB2AA5FQRGAHITW4A", "arn": "arn:aws:iam::811596193553:role/SecurityMonkey", "accountId": "811596193553", "userName": "SecurityMonkey"}}}, "resources": []}}