Task: attack_reconstruction (flaws_cloudtrail)
Prompt: One principal appears to gain a foothold and then conduct a broad AWS inventory sweep spanning IAM, EC2/VPC, S3, Lambda, and RDS. Identify the responsible principal, the MITRE ATT&CK technique that best describes the behavior, the supporting CloudTrail record_ids grouped by each phase of the chain, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e809a7b5-efcb-45cc-9665-15f67acee9ab", "record_id": "flaws_cloudtrail:0000000:e809a7b5-efcb-45cc-9665-15f67acee9ab", "row_index": 0, "timestamp": "2019-07-30T21:43:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e809a7b5-efcb-45cc-9665-15f67acee9ab", "eventTime": "2019-07-30T21:43:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "439860151314"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f69ac38b-6f92-45c5-a04f-0175416c7385", "record_id": "flaws_cloudtrail:0000001:f69ac38b-6f92-45c5-a04f-0175416c7385", "row_index": 1, "timestamp": "2019-07-30T21:44:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f69ac38b-6f92-45c5-a04f-0175416c7385", "eventTime": "2019-07-30T21:44:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "439860151314"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f69ac38b-6f92-45c5-a04f-0175416c7385", "record_id": "flaws_cloudtrail:0000002:f69ac38b-6f92-45c5-a04f-0175416c7385", "row_index": 2, "timestamp": "2019-07-30T21:44:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f69ac38b-6f92-45c5-a04f-0175416c7385", "eventTime": "2019-07-30T21:44:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "439860151314"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "061363c-fef5-4b64-9594-46ac0ab016d5", "record_id": "flaws_cloudtrail:0000003:061363c-fef5-4b64-9594-46ac0ab016d5", "row_index": 3, "timestamp": "2019-07-30T21:44:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "061363c-fef5-4b64-9594-46ac0ab016d5", "eventTime": "2019-07-30T21:44:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "507420276916"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "061363c-fef5-4b64-9594-46ac0ab016d5", "record_id": "flaws_cloudtrail:0000004:061363c-fef5-4b64-9594-46ac0ab016d5", "row_index": 4, "timestamp": "2019-07-30T21:44:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "061363c-fef5-4b64-9594-46ac0ab016d5", "eventTime": "2019-07-30T21:44:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "507420276916"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1806c623-b9bb-482b-9648-dc9af1f3628b", "record_id": "flaws_cloudtrail:0000005:1806c623-b9bb-482b-9648-dc9af1f3628b", "row_index": 5, "timestamp": "2019-07-30T21:44:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1806c623-b9bb-482b-9648-dc9af1f3628b", "eventTime": "2019-07-30T21:44:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "507420276916"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1806c623-b9bb-482b-9648-dc9af1f3628b", "record_id": "flaws_cloudtrail:0000006:1806c623-b9bb-482b-9648-dc9af1f3628b", "row_index": 6, "timestamp": "2019-07-30T21:44:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1806c623-b9bb-482b-9648-dc9af1f3628b", "eventTime": "2019-07-30T21:44:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "507420276916"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a612f3df-0555-4b9e-bcec-6fb4c4838aab", "record_id": "flaws_cloudtrail:0000007:a612f3df-0555-4b9e-bcec-6fb4c4838aab", "row_index": 7, "timestamp": "2019-07-30T21:44:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a612f3df-0555-4b9e-bcec-6fb4c4838aab", "eventTime": "2019-07-30T21:44:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "507420276916"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4991f4f-bf89-4ddb-a3ae-5d9982649235", "record_id": "flaws_cloudtrail:0000008:f4991f4f-bf89-4ddb-a3ae-5d9982649235", "row_index": 8, "timestamp": "2019-07-30T21:44:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4991f4f-bf89-4ddb-a3ae-5d9982649235", "eventTime": "2019-07-30T21:44:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "507420276916"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a612f3df-0555-4b9e-bcec-6fb4c4838aab", "record_id": "flaws_cloudtrail:0000009:a612f3df-0555-4b9e-bcec-6fb4c4838aab", "row_index": 9, "timestamp": "2019-07-30T21:44:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a612f3df-0555-4b9e-bcec-6fb4c4838aab", "eventTime": "2019-07-30T21:44:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "507420276916"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4991f4f-bf89-4ddb-a3ae-5d9982649235", "record_id": "flaws_cloudtrail:0000010:f4991f4f-bf89-4ddb-a3ae-5d9982649235", "row_index": 10, "timestamp": "2019-07-30T21:44:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4991f4f-bf89-4ddb-a3ae-5d9982649235", "eventTime": "2019-07-30T21:44:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "507420276916"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be321c0b-2503-4cb0-9678-b66a928daaac", "record_id": "flaws_cloudtrail:0000011:be321c0b-2503-4cb0-9678-b66a928daaac", "row_index": 11, "timestamp": "2019-07-30T21:44:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be321c0b-2503-4cb0-9678-b66a928daaac", "eventTime": "2019-07-30T21:44:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "507420276916"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be321c0b-2503-4cb0-9678-b66a928daaac", "record_id": "flaws_cloudtrail:0000012:be321c0b-2503-4cb0-9678-b66a928daaac", "row_index": 12, "timestamp": "2019-07-30T21:44:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be321c0b-2503-4cb0-9678-b66a928daaac", "eventTime": "2019-07-30T21:44:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "507420276916"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c5c2b69-5484-4145-a7ca-2e73fd0e2cab", "record_id": "flaws_cloudtrail:0000013:7c5c2b69-5484-4145-a7ca-2e73fd0e2cab", "row_index": 13, "timestamp": "2019-07-30T21:44:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c5c2b69-5484-4145-a7ca-2e73fd0e2cab", "eventTime": "2019-07-30T21:44:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "507420276916"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c5c2b69-5484-4145-a7ca-2e73fd0e2cab", "record_id": "flaws_cloudtrail:0000014:7c5c2b69-5484-4145-a7ca-2e73fd0e2cab", "row_index": 14, "timestamp": "2019-07-30T21:44:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c5c2b69-5484-4145-a7ca-2e73fd0e2cab", "eventTime": "2019-07-30T21:44:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "507420276916"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad37db40-1392-4fb7-b309-66033d8b0", "record_id": "flaws_cloudtrail:0000015:ad37db40-1392-4fb7-b309-66033d8b0", "row_index": 15, "timestamp": "2019-07-30T21:44:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad37db40-1392-4fb7-b309-66033d8b0", "eventTime": "2019-07-30T21:44:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "507420276916"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad37db40-1392-4fb7-b309-66033d8b0", "record_id": "flaws_cloudtrail:0000016:ad37db40-1392-4fb7-b309-66033d8b0", "row_index": 16, "timestamp": "2019-07-30T21:44:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad37db40-1392-4fb7-b309-66033d8b0", "eventTime": "2019-07-30T21:44:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "507420276916"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e77cf4f8-de7a-4b16-9d25-18b53df4d91f", "record_id": "flaws_cloudtrail:0000017:e77cf4f8-de7a-4b16-9d25-18b53df4d91f", "row_index": 17, "timestamp": "2019-07-30T21:44:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e77cf4f8-de7a-4b16-9d25-18b53df4d91f", "eventTime": "2019-07-30T21:44:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "507420276916"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e77cf4f8-de7a-4b16-9d25-18b53df4d91f", "record_id": "flaws_cloudtrail:0000018:e77cf4f8-de7a-4b16-9d25-18b53df4d91f", "row_index": 18, "timestamp": "2019-07-30T21:44:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e77cf4f8-de7a-4b16-9d25-18b53df4d91f", "eventTime": "2019-07-30T21:44:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "507420276916"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5319ad70-12a6-4117-814b-9fa1e3217e95", "record_id": "flaws_cloudtrail:0000019:5319ad70-12a6-4117-814b-9fa1e3217e95", "row_index": 19, "timestamp": "2019-07-30T21:44:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5319ad70-12a6-4117-814b-9fa1e3217e95", "eventTime": "2019-07-30T21:44:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "507420276916"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5319ad70-12a6-4117-814b-9fa1e3217e95", "record_id": "flaws_cloudtrail:0000020:5319ad70-12a6-4117-814b-9fa1e3217e95", "row_index": 20, "timestamp": "2019-07-30T21:44:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5319ad70-12a6-4117-814b-9fa1e3217e95", "eventTime": "2019-07-30T21:44:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "507420276916"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa43645-b11c-4cf6-b761-8182d3ea4b98", "record_id": "flaws_cloudtrail:0000021:fa43645-b11c-4cf6-b761-8182d3ea4b98", "row_index": 21, "timestamp": "2019-07-30T21:44:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa43645-b11c-4cf6-b761-8182d3ea4b98", "eventTime": "2019-07-30T21:44:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "507420276916"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa43645-b11c-4cf6-b761-8182d3ea4b98", "record_id": "flaws_cloudtrail:0000022:fa43645-b11c-4cf6-b761-8182d3ea4b98", "row_index": 22, "timestamp": "2019-07-30T21:44:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa43645-b11c-4cf6-b761-8182d3ea4b98", "eventTime": "2019-07-30T21:44:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "507420276916"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e22cad8c-de6b-44ae-9275-52ea6b76d9f7", "record_id": "flaws_cloudtrail:0000023:e22cad8c-de6b-44ae-9275-52ea6b76d9f7", "row_index": 23, "timestamp": "2019-07-30T21:44:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e22cad8c-de6b-44ae-9275-52ea6b76d9f7", "eventTime": "2019-07-30T21:44:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "507420276916"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e22cad8c-de6b-44ae-9275-52ea6b76d9f7", "record_id": "flaws_cloudtrail:0000024:e22cad8c-de6b-44ae-9275-52ea6b76d9f7", "row_index": 24, "timestamp": "2019-07-30T21:44:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e22cad8c-de6b-44ae-9275-52ea6b76d9f7", "eventTime": "2019-07-30T21:44:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "507420276916"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8188a853-181d-4b33-83e5-ce674b3c469d", "record_id": "flaws_cloudtrail:0000025:8188a853-181d-4b33-83e5-ce674b3c469d", "row_index": 25, "timestamp": "2019-07-30T21:44:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8188a853-181d-4b33-83e5-ce674b3c469d", "eventTime": "2019-07-30T21:44:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "507420276916"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8188a853-181d-4b33-83e5-ce674b3c469d", "record_id": "flaws_cloudtrail:0000026:8188a853-181d-4b33-83e5-ce674b3c469d", "row_index": 26, "timestamp": "2019-07-30T21:44:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8188a853-181d-4b33-83e5-ce674b3c469d", "eventTime": "2019-07-30T21:44:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "507420276916"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cee1e0ff-675f-4822-acd3-9ebc6ebd982f", "record_id": "flaws_cloudtrail:0000027:cee1e0ff-675f-4822-acd3-9ebc6ebd982f", "row_index": 27, "timestamp": "2019-07-30T21:44:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cee1e0ff-675f-4822-acd3-9ebc6ebd982f", "eventTime": "2019-07-30T21:44:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "507420276916"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cee1e0ff-675f-4822-acd3-9ebc6ebd982f", "record_id": "flaws_cloudtrail:0000028:cee1e0ff-675f-4822-acd3-9ebc6ebd982f", "row_index": 28, "timestamp": "2019-07-30T21:44:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cee1e0ff-675f-4822-acd3-9ebc6ebd982f", "eventTime": "2019-07-30T21:44:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "507420276916"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9dda2648-7b6b-499b-9524-09538ce024", "record_id": "flaws_cloudtrail:0000029:9dda2648-7b6b-499b-9524-09538ce024", "row_index": 29, "timestamp": "2019-07-30T21:44:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9dda2648-7b6b-499b-9524-09538ce024", "eventTime": "2019-07-30T21:44:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "507420276916"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9dda2648-7b6b-499b-9524-09538ce024", "record_id": "flaws_cloudtrail:0000030:9dda2648-7b6b-499b-9524-09538ce024", "row_index": 30, "timestamp": "2019-07-30T21:44:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9dda2648-7b6b-499b-9524-09538ce024", "eventTime": "2019-07-30T21:44:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "507420276916"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d89e6f91-9267-40af-878a-c2f752be0fec", "record_id": "flaws_cloudtrail:0000031:d89e6f91-9267-40af-878a-c2f752be0fec", "row_index": 31, "timestamp": "2019-07-30T21:44:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d89e6f91-9267-40af-878a-c2f752be0fec", "eventTime": "2019-07-30T21:44:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "507420276916"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d89e6f91-9267-40af-878a-c2f752be0fec", "record_id": "flaws_cloudtrail:0000032:d89e6f91-9267-40af-878a-c2f752be0fec", "row_index": 32, "timestamp": "2019-07-30T21:44:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d89e6f91-9267-40af-878a-c2f752be0fec", "eventTime": "2019-07-30T21:44:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "507420276916"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ea027769-5c0f-469b-94e3-4d3db36faec0", "record_id": "flaws_cloudtrail:0000033:8ea027769-5c0f-469b-94e3-4d3db36faec0", "row_index": 33, "timestamp": "2019-07-30T21:44:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ea027769-5c0f-469b-94e3-4d3db36faec0", "eventTime": "2019-07-30T21:44:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "507420276916"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ea027769-5c0f-469b-94e3-4d3db36faec0", "record_id": "flaws_cloudtrail:0000034:8ea027769-5c0f-469b-94e3-4d3db36faec0", "row_index": 34, "timestamp": "2019-07-30T21:44:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ea027769-5c0f-469b-94e3-4d3db36faec0", "eventTime": "2019-07-30T21:44:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "507420276916"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fcc98f2-8c65-4ba5-a8b1-a5cdd4bbcbff", "record_id": "flaws_cloudtrail:0000035:1fcc98f2-8c65-4ba5-a8b1-a5cdd4bbcbff", "row_index": 35, "timestamp": "2019-07-30T21:44:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fcc98f2-8c65-4ba5-a8b1-a5cdd4bbcbff", "eventTime": "2019-07-30T21:44:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "586200229333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64928ce-da39-4b92-93f2-97dc973a13dd", "record_id": "flaws_cloudtrail:0000036:64928ce-da39-4b92-93f2-97dc973a13dd", "row_index": 36, "timestamp": "2019-07-30T21:44:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64928ce-da39-4b92-93f2-97dc973a13dd", "eventTime": "2019-07-30T21:44:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "586200229333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fcc98f2-8c65-4ba5-a8b1-a5cdd4bbcbff", "record_id": "flaws_cloudtrail:0000037:1fcc98f2-8c65-4ba5-a8b1-a5cdd4bbcbff", "row_index": 37, "timestamp": "2019-07-30T21:44:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fcc98f2-8c65-4ba5-a8b1-a5cdd4bbcbff", "eventTime": "2019-07-30T21:44:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "586200229333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64928ce-da39-4b92-93f2-97dc973a13dd", "record_id": "flaws_cloudtrail:0000038:64928ce-da39-4b92-93f2-97dc973a13dd", "row_index": 38, "timestamp": "2019-07-30T21:44:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64928ce-da39-4b92-93f2-97dc973a13dd", "eventTime": "2019-07-30T21:44:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "586200229333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7db94b06-25d9-4166-aa19-de4a8356ae0b", "record_id": "flaws_cloudtrail:0000039:7db94b06-25d9-4166-aa19-de4a8356ae0b", "row_index": 39, "timestamp": "2019-07-30T21:44:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7db94b06-25d9-4166-aa19-de4a8356ae0b", "eventTime": "2019-07-30T21:44:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "586200229333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7db94b06-25d9-4166-aa19-de4a8356ae0b", "record_id": "flaws_cloudtrail:0000040:7db94b06-25d9-4166-aa19-de4a8356ae0b", "row_index": 40, "timestamp": "2019-07-30T21:44:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7db94b06-25d9-4166-aa19-de4a8356ae0b", "eventTime": "2019-07-30T21:44:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "586200229333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93d21f01-cc0f-4bc4-b803-65257f925", "record_id": "flaws_cloudtrail:0000041:93d21f01-cc0f-4bc4-b803-65257f925", "row_index": 41, "timestamp": "2019-07-30T21:44:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93d21f01-cc0f-4bc4-b803-65257f925", "eventTime": "2019-07-30T21:44:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "586200229333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93d21f01-cc0f-4bc4-b803-65257f925", "record_id": "flaws_cloudtrail:0000042:93d21f01-cc0f-4bc4-b803-65257f925", "row_index": 42, "timestamp": "2019-07-30T21:44:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93d21f01-cc0f-4bc4-b803-65257f925", "eventTime": "2019-07-30T21:44:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "586200229333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bfd5cf7e-e9d9-4f7a-a30b-aa9fd4123bc0", "record_id": "flaws_cloudtrail:0000043:bfd5cf7e-e9d9-4f7a-a30b-aa9fd4123bc0", "row_index": 43, "timestamp": "2019-07-30T21:44:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bfd5cf7e-e9d9-4f7a-a30b-aa9fd4123bc0", "eventTime": "2019-07-30T21:44:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "586200229333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bfd5cf7e-e9d9-4f7a-a30b-aa9fd4123bc0", "record_id": "flaws_cloudtrail:0000044:bfd5cf7e-e9d9-4f7a-a30b-aa9fd4123bc0", "row_index": 44, "timestamp": "2019-07-30T21:44:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bfd5cf7e-e9d9-4f7a-a30b-aa9fd4123bc0", "eventTime": "2019-07-30T21:44:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "586200229333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe1ed4eb-8408-464a-ba23-85e4b6207b4f", "record_id": "flaws_cloudtrail:0000045:fe1ed4eb-8408-464a-ba23-85e4b6207b4f", "row_index": 45, "timestamp": "2019-07-30T21:44:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe1ed4eb-8408-464a-ba23-85e4b6207b4f", "eventTime": "2019-07-30T21:44:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "586200229333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe1ed4eb-8408-464a-ba23-85e4b6207b4f", "record_id": "flaws_cloudtrail:0000046:fe1ed4eb-8408-464a-ba23-85e4b6207b4f", "row_index": 46, "timestamp": "2019-07-30T21:44:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe1ed4eb-8408-464a-ba23-85e4b6207b4f", "eventTime": "2019-07-30T21:44:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "586200229333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2da344799-d698-4a71-9d56-c23e96a9910e", "record_id": "flaws_cloudtrail:0000047:2da344799-d698-4a71-9d56-c23e96a9910e", "row_index": 47, "timestamp": "2019-07-30T21:44:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2da344799-d698-4a71-9d56-c23e96a9910e", "eventTime": "2019-07-30T21:44:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "586200229333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2da344799-d698-4a71-9d56-c23e96a9910e", "record_id": "flaws_cloudtrail:0000048:2da344799-d698-4a71-9d56-c23e96a9910e", "row_index": 48, "timestamp": "2019-07-30T21:44:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2da344799-d698-4a71-9d56-c23e96a9910e", "eventTime": "2019-07-30T21:44:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "586200229333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ffb171d-119b-441d-a097-a691e3a7a66a", "record_id": "flaws_cloudtrail:0000049:8ffb171d-119b-441d-a097-a691e3a7a66a", "row_index": 49, "timestamp": "2019-07-30T21:44:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ffb171d-119b-441d-a097-a691e3a7a66a", "eventTime": "2019-07-30T21:44:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "586200229333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ffb171d-119b-441d-a097-a691e3a7a66a", "record_id": "flaws_cloudtrail:0000050:8ffb171d-119b-441d-a097-a691e3a7a66a", "row_index": 50, "timestamp": "2019-07-30T21:44:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ffb171d-119b-441d-a097-a691e3a7a66a", "eventTime": "2019-07-30T21:44:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "586200229333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b81e169-441f-4738-a19c-85a35a494212", "record_id": "flaws_cloudtrail:0000051:7b81e169-441f-4738-a19c-85a35a494212", "row_index": 51, "timestamp": "2019-07-30T21:44:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b81e169-441f-4738-a19c-85a35a494212", "eventTime": "2019-07-30T21:44:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "586200229333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b81e169-441f-4738-a19c-85a35a494212", "record_id": "flaws_cloudtrail:0000052:7b81e169-441f-4738-a19c-85a35a494212", "row_index": 52, "timestamp": "2019-07-30T21:44:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b81e169-441f-4738-a19c-85a35a494212", "eventTime": "2019-07-30T21:44:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "586200229333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25bc67e3-a50a-4c4b-9962-68d8da49e0c7", "record_id": "flaws_cloudtrail:0000053:25bc67e3-a50a-4c4b-9962-68d8da49e0c7", "row_index": 53, "timestamp": "2019-07-30T21:44:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25bc67e3-a50a-4c4b-9962-68d8da49e0c7", "eventTime": "2019-07-30T21:44:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "586200229333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25bc67e3-a50a-4c4b-9962-68d8da49e0c7", "record_id": "flaws_cloudtrail:0000054:25bc67e3-a50a-4c4b-9962-68d8da49e0c7", "row_index": 54, "timestamp": "2019-07-30T21:44:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25bc67e3-a50a-4c4b-9962-68d8da49e0c7", "eventTime": "2019-07-30T21:44:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "586200229333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3f30e58-4509-4d33-879d-e4d7755303da", "record_id": "flaws_cloudtrail:0000055:d3f30e58-4509-4d33-879d-e4d7755303da", "row_index": 55, "timestamp": "2019-07-30T21:44:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3f30e58-4509-4d33-879d-e4d7755303da", "eventTime": "2019-07-30T21:44:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "586200229333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3f30e58-4509-4d33-879d-e4d7755303da", "record_id": "flaws_cloudtrail:0000056:d3f30e58-4509-4d33-879d-e4d7755303da", "row_index": 56, "timestamp": "2019-07-30T21:44:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3f30e58-4509-4d33-879d-e4d7755303da", "eventTime": "2019-07-30T21:44:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "586200229333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c65168e-6cc8-4ba2-947a-de838bc106de", "record_id": "flaws_cloudtrail:0000057:1c65168e-6cc8-4ba2-947a-de838bc106de", "row_index": 57, "timestamp": "2019-07-30T21:44:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c65168e-6cc8-4ba2-947a-de838bc106de", "eventTime": "2019-07-30T21:44:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "586200229333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c65168e-6cc8-4ba2-947a-de838bc106de", "record_id": "flaws_cloudtrail:0000058:1c65168e-6cc8-4ba2-947a-de838bc106de", "row_index": 58, "timestamp": "2019-07-30T21:44:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c65168e-6cc8-4ba2-947a-de838bc106de", "eventTime": "2019-07-30T21:44:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "586200229333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47bb8582-5e83-4c7d-b7db-226e77c95058", "record_id": "flaws_cloudtrail:0000059:47bb8582-5e83-4c7d-b7db-226e77c95058", "row_index": 59, "timestamp": "2019-07-30T21:44:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47bb8582-5e83-4c7d-b7db-226e77c95058", "eventTime": "2019-07-30T21:44:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "586200229333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47bb8582-5e83-4c7d-b7db-226e77c95058", "record_id": "flaws_cloudtrail:0000060:47bb8582-5e83-4c7d-b7db-226e77c95058", "row_index": 60, "timestamp": "2019-07-30T21:44:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47bb8582-5e83-4c7d-b7db-226e77c95058", "eventTime": "2019-07-30T21:44:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "586200229333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d435584b-bd44-41ee-8f9b-8948eb38314d", "record_id": "flaws_cloudtrail:0000061:d435584b-bd44-41ee-8f9b-8948eb38314d", "row_index": 61, "timestamp": "2019-07-30T21:44:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d435584b-bd44-41ee-8f9b-8948eb38314d", "eventTime": "2019-07-30T21:44:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "586200229333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d435584b-bd44-41ee-8f9b-8948eb38314d", "record_id": "flaws_cloudtrail:0000062:d435584b-bd44-41ee-8f9b-8948eb38314d", "row_index": 62, "timestamp": "2019-07-30T21:44:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d435584b-bd44-41ee-8f9b-8948eb38314d", "eventTime": "2019-07-30T21:44:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "586200229333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21785-ec10-4144-ad29-3ec9b0c0c8e6", "record_id": "flaws_cloudtrail:0000063:21785-ec10-4144-ad29-3ec9b0c0c8e6", "row_index": 63, "timestamp": "2019-07-30T21:44:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21785-ec10-4144-ad29-3ec9b0c0c8e6", "eventTime": "2019-07-30T21:44:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "586200229333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21785-ec10-4144-ad29-3ec9b0c0c8e6", "record_id": "flaws_cloudtrail:0000064:21785-ec10-4144-ad29-3ec9b0c0c8e6", "row_index": 64, "timestamp": "2019-07-30T21:44:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21785-ec10-4144-ad29-3ec9b0c0c8e6", "eventTime": "2019-07-30T21:44:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "586200229333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7f8ba56-7820-40b7-b09b-ac6ae30fd44d", "record_id": "flaws_cloudtrail:0000065:f7f8ba56-7820-40b7-b09b-ac6ae30fd44d", "row_index": 65, "timestamp": "2019-07-30T21:44:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7f8ba56-7820-40b7-b09b-ac6ae30fd44d", "eventTime": "2019-07-30T21:44:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "586200229333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7f8ba56-7820-40b7-b09b-ac6ae30fd44d", "record_id": "flaws_cloudtrail:0000066:f7f8ba56-7820-40b7-b09b-ac6ae30fd44d", "row_index": 66, "timestamp": "2019-07-30T21:44:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7f8ba56-7820-40b7-b09b-ac6ae30fd44d", "eventTime": "2019-07-30T21:44:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "586200229333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f4c9f4c-d3bc-4d77-87c3-ce3964ca833d", "record_id": "flaws_cloudtrail:0000067:0f4c9f4c-d3bc-4d77-87c3-ce3964ca833d", "row_index": 67, "timestamp": "2019-07-30T21:44:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f4c9f4c-d3bc-4d77-87c3-ce3964ca833d", "eventTime": "2019-07-30T21:44:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "733393488370"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f4c9f4c-d3bc-4d77-87c3-ce3964ca833d", "record_id": "flaws_cloudtrail:0000068:0f4c9f4c-d3bc-4d77-87c3-ce3964ca833d", "row_index": 68, "timestamp": "2019-07-30T21:44:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f4c9f4c-d3bc-4d77-87c3-ce3964ca833d", "eventTime": "2019-07-30T21:44:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "733393488370"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6a76ebd-e0ab-4389-9089-81dee3f83cf2", "record_id": "flaws_cloudtrail:0000069:a6a76ebd-e0ab-4389-9089-81dee3f83cf2", "row_index": 69, "timestamp": "2019-07-30T21:44:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6a76ebd-e0ab-4389-9089-81dee3f83cf2", "eventTime": "2019-07-30T21:44:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "733393488370"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6a76ebd-e0ab-4389-9089-81dee3f83cf2", "record_id": "flaws_cloudtrail:0000070:a6a76ebd-e0ab-4389-9089-81dee3f83cf2", "row_index": 70, "timestamp": "2019-07-30T21:44:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6a76ebd-e0ab-4389-9089-81dee3f83cf2", "eventTime": "2019-07-30T21:44:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "733393488370"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "236dbfed-a573-4747-afe5-a16ab285ccda", "record_id": "flaws_cloudtrail:0000071:236dbfed-a573-4747-afe5-a16ab285ccda", "row_index": 71, "timestamp": "2019-07-30T21:44:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "236dbfed-a573-4747-afe5-a16ab285ccda", "eventTime": "2019-07-30T21:44:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "733393488370"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af9fd0d9-c4b7-4bee-8363-a46ad3d607c9", "record_id": "flaws_cloudtrail:0000072:af9fd0d9-c4b7-4bee-8363-a46ad3d607c9", "row_index": 72, "timestamp": "2019-07-30T21:44:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af9fd0d9-c4b7-4bee-8363-a46ad3d607c9", "eventTime": "2019-07-30T21:44:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "733393488370"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "236dbfed-a573-4747-afe5-a16ab285ccda", "record_id": "flaws_cloudtrail:0000073:236dbfed-a573-4747-afe5-a16ab285ccda", "row_index": 73, "timestamp": "2019-07-30T21:44:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "236dbfed-a573-4747-afe5-a16ab285ccda", "eventTime": "2019-07-30T21:44:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "733393488370"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af9fd0d9-c4b7-4bee-8363-a46ad3d607c9", "record_id": "flaws_cloudtrail:0000074:af9fd0d9-c4b7-4bee-8363-a46ad3d607c9", "row_index": 74, "timestamp": "2019-07-30T21:44:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af9fd0d9-c4b7-4bee-8363-a46ad3d607c9", "eventTime": "2019-07-30T21:44:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "733393488370"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "610a632e-58de-41ce-a5b0-44305a4716ad", "record_id": "flaws_cloudtrail:0000075:610a632e-58de-41ce-a5b0-44305a4716ad", "row_index": 75, "timestamp": "2019-07-30T21:44:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "610a632e-58de-41ce-a5b0-44305a4716ad", "eventTime": "2019-07-30T21:44:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "733393488370"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "610a632e-58de-41ce-a5b0-44305a4716ad", "record_id": "flaws_cloudtrail:0000076:610a632e-58de-41ce-a5b0-44305a4716ad", "row_index": 76, "timestamp": "2019-07-30T21:44:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "610a632e-58de-41ce-a5b0-44305a4716ad", "eventTime": "2019-07-30T21:44:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "733393488370"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3f392111-d0ae-426f-aa3c-1062d1e90963", "record_id": "flaws_cloudtrail:0000077:b3f392111-d0ae-426f-aa3c-1062d1e90963", "row_index": 77, "timestamp": "2019-07-30T21:45:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3f392111-d0ae-426f-aa3c-1062d1e90963", "eventTime": "2019-07-30T21:45:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "733393488370"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3f392111-d0ae-426f-aa3c-1062d1e90963", "record_id": "flaws_cloudtrail:0000078:b3f392111-d0ae-426f-aa3c-1062d1e90963", "row_index": 78, "timestamp": "2019-07-30T21:45:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3f392111-d0ae-426f-aa3c-1062d1e90963", "eventTime": "2019-07-30T21:45:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "733393488370"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b615b1c-2bd4-49f4-8a49-2be51e55c06e", "record_id": "flaws_cloudtrail:0000079:6b615b1c-2bd4-49f4-8a49-2be51e55c06e", "row_index": 79, "timestamp": "2019-07-30T21:45:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b615b1c-2bd4-49f4-8a49-2be51e55c06e", "eventTime": "2019-07-30T21:45:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "733393488370"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b615b1c-2bd4-49f4-8a49-2be51e55c06e", "record_id": "flaws_cloudtrail:0000080:6b615b1c-2bd4-49f4-8a49-2be51e55c06e", "row_index": 80, "timestamp": "2019-07-30T21:45:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b615b1c-2bd4-49f4-8a49-2be51e55c06e", "eventTime": "2019-07-30T21:45:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "733393488370"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42af1967-684b-4bef-be45-7c1bb95477d", "record_id": "flaws_cloudtrail:0000081:42af1967-684b-4bef-be45-7c1bb95477d", "row_index": 81, "timestamp": "2019-07-30T21:45:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42af1967-684b-4bef-be45-7c1bb95477d", "eventTime": "2019-07-30T21:45:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "733393488370"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42af1967-684b-4bef-be45-7c1bb95477d", "record_id": "flaws_cloudtrail:0000082:42af1967-684b-4bef-be45-7c1bb95477d", "row_index": 82, "timestamp": "2019-07-30T21:45:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42af1967-684b-4bef-be45-7c1bb95477d", "eventTime": "2019-07-30T21:45:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "733393488370"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a88e6fb-a709-4b8e-90e1-28971bcef7f", "record_id": "flaws_cloudtrail:0000083:9a88e6fb-a709-4b8e-90e1-28971bcef7f", "row_index": 83, "timestamp": "2019-07-30T21:45:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a88e6fb-a709-4b8e-90e1-28971bcef7f", "eventTime": "2019-07-30T21:45:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "733393488370"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "477420e96-0124-4733-8c7d-4a39d12f1a60", "record_id": "flaws_cloudtrail:0000084:477420e96-0124-4733-8c7d-4a39d12f1a60", "row_index": 84, "timestamp": "2019-07-30T21:45:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "477420e96-0124-4733-8c7d-4a39d12f1a60", "eventTime": "2019-07-30T21:45:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "733393488370"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a88e6fb-a709-4b8e-90e1-28971bcef7f", "record_id": "flaws_cloudtrail:0000085:9a88e6fb-a709-4b8e-90e1-28971bcef7f", "row_index": 85, "timestamp": "2019-07-30T21:45:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a88e6fb-a709-4b8e-90e1-28971bcef7f", "eventTime": "2019-07-30T21:45:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "733393488370"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "477420e96-0124-4733-8c7d-4a39d12f1a60", "record_id": "flaws_cloudtrail:0000086:477420e96-0124-4733-8c7d-4a39d12f1a60", "row_index": 86, "timestamp": "2019-07-30T21:45:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "477420e96-0124-4733-8c7d-4a39d12f1a60", "eventTime": "2019-07-30T21:45:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "733393488370"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ecbc3ba-a4fd-4711-9c33-0e339d219511", "record_id": "flaws_cloudtrail:0000087:7ecbc3ba-a4fd-4711-9c33-0e339d219511", "row_index": 87, "timestamp": "2019-07-30T21:45:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ecbc3ba-a4fd-4711-9c33-0e339d219511", "eventTime": "2019-07-30T21:45:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "733393488370"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ecbc3ba-a4fd-4711-9c33-0e339d219511", "record_id": "flaws_cloudtrail:0000088:7ecbc3ba-a4fd-4711-9c33-0e339d219511", "row_index": 88, "timestamp": "2019-07-30T21:45:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ecbc3ba-a4fd-4711-9c33-0e339d219511", "eventTime": "2019-07-30T21:45:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "733393488370"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d77a9e1-a304-450b-8ae1-dc4e17555ce", "record_id": "flaws_cloudtrail:0000089:7d77a9e1-a304-450b-8ae1-dc4e17555ce", "row_index": 89, "timestamp": "2019-07-30T21:45:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d77a9e1-a304-450b-8ae1-dc4e17555ce", "eventTime": "2019-07-30T21:45:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "733393488370"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d77a9e1-a304-450b-8ae1-dc4e17555ce", "record_id": "flaws_cloudtrail:0000090:7d77a9e1-a304-450b-8ae1-dc4e17555ce", "row_index": 90, "timestamp": "2019-07-30T21:45:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d77a9e1-a304-450b-8ae1-dc4e17555ce", "eventTime": "2019-07-30T21:45:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "733393488370"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90fd3b6a-9883-4b8d-8ea1-b274979", "record_id": "flaws_cloudtrail:0000091:90fd3b6a-9883-4b8d-8ea1-b274979", "row_index": 91, "timestamp": "2019-07-30T21:45:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90fd3b6a-9883-4b8d-8ea1-b274979", "eventTime": "2019-07-30T21:45:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "733393488370"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90fd3b6a-9883-4b8d-8ea1-b274979", "record_id": "flaws_cloudtrail:0000092:90fd3b6a-9883-4b8d-8ea1-b274979", "row_index": 92, "timestamp": "2019-07-30T21:45:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90fd3b6a-9883-4b8d-8ea1-b274979", "eventTime": "2019-07-30T21:45:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "733393488370"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc7f69fc-d45d-4a93-912a-5dd71372ceb6", "record_id": "flaws_cloudtrail:0000093:cc7f69fc-d45d-4a93-912a-5dd71372ceb6", "row_index": 93, "timestamp": "2019-07-30T21:45:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc7f69fc-d45d-4a93-912a-5dd71372ceb6", "eventTime": "2019-07-30T21:45:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "733393488370"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc7f69fc-d45d-4a93-912a-5dd71372ceb6", "record_id": "flaws_cloudtrail:0000094:cc7f69fc-d45d-4a93-912a-5dd71372ceb6", "row_index": 94, "timestamp": "2019-07-30T21:45:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc7f69fc-d45d-4a93-912a-5dd71372ceb6", "eventTime": "2019-07-30T21:45:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "733393488370"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24987a7-f1c4-4839-99cb-bbb73a3dc10a", "record_id": "flaws_cloudtrail:0000095:24987a7-f1c4-4839-99cb-bbb73a3dc10a", "row_index": 95, "timestamp": "2019-07-30T21:45:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24987a7-f1c4-4839-99cb-bbb73a3dc10a", "eventTime": "2019-07-30T21:45:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "733393488370"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24987a7-f1c4-4839-99cb-bbb73a3dc10a", "record_id": "flaws_cloudtrail:0000096:24987a7-f1c4-4839-99cb-bbb73a3dc10a", "row_index": 96, "timestamp": "2019-07-30T21:45:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24987a7-f1c4-4839-99cb-bbb73a3dc10a", "eventTime": "2019-07-30T21:45:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "733393488370"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0b3b866-90a2-45ad-bdc5-3a84338e0f1", "record_id": "flaws_cloudtrail:0000097:b0b3b866-90a2-45ad-bdc5-3a84338e0f1", "row_index": 97, "timestamp": "2019-07-30T21:45:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0b3b866-90a2-45ad-bdc5-3a84338e0f1", "eventTime": "2019-07-30T21:45:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "733393488370"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0b3b866-90a2-45ad-bdc5-3a84338e0f1", "record_id": "flaws_cloudtrail:0000098:b0b3b866-90a2-45ad-bdc5-3a84338e0f1", "row_index": 98, "timestamp": "2019-07-30T21:45:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0b3b866-90a2-45ad-bdc5-3a84338e0f1", "eventTime": "2019-07-30T21:45:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "733393488370"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "964615d9c-8308-465d-96bb-7f1c592f83db", "record_id": "flaws_cloudtrail:0000099:964615d9c-8308-465d-96bb-7f1c592f83db", "row_index": 99, "timestamp": "2019-07-30T21:45:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "964615d9c-8308-465d-96bb-7f1c592f83db", "eventTime": "2019-07-30T21:45:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "647157010473"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "964615d9c-8308-465d-96bb-7f1c592f83db", "record_id": "flaws_cloudtrail:0000100:964615d9c-8308-465d-96bb-7f1c592f83db", "row_index": 100, "timestamp": "2019-07-30T21:45:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "964615d9c-8308-465d-96bb-7f1c592f83db", "eventTime": "2019-07-30T21:45:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "647157010473"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13403c13-56d5-401d-bb88-866048a9561a", "record_id": "flaws_cloudtrail:0000101:13403c13-56d5-401d-bb88-866048a9561a", "row_index": 101, "timestamp": "2019-07-30T21:45:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13403c13-56d5-401d-bb88-866048a9561a", "eventTime": "2019-07-30T21:45:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "647157010473"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13403c13-56d5-401d-bb88-866048a9561a", "record_id": "flaws_cloudtrail:0000102:13403c13-56d5-401d-bb88-866048a9561a", "row_index": 102, "timestamp": "2019-07-30T21:45:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13403c13-56d5-401d-bb88-866048a9561a", "eventTime": "2019-07-30T21:45:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "647157010473"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3b0048d-fd5e-4be6-8a98-4cd3b774b033", "record_id": "flaws_cloudtrail:0000103:e3b0048d-fd5e-4be6-8a98-4cd3b774b033", "row_index": 103, "timestamp": "2019-07-30T21:45:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3b0048d-fd5e-4be6-8a98-4cd3b774b033", "eventTime": "2019-07-30T21:45:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "647157010473"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3b0048d-fd5e-4be6-8a98-4cd3b774b033", "record_id": "flaws_cloudtrail:0000104:e3b0048d-fd5e-4be6-8a98-4cd3b774b033", "row_index": 104, "timestamp": "2019-07-30T21:45:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3b0048d-fd5e-4be6-8a98-4cd3b774b033", "eventTime": "2019-07-30T21:45:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "647157010473"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8838f0d9-5722-4a5c-91e3-841651a922f", "record_id": "flaws_cloudtrail:0000105:8838f0d9-5722-4a5c-91e3-841651a922f", "row_index": 105, "timestamp": "2019-07-30T21:45:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8838f0d9-5722-4a5c-91e3-841651a922f", "eventTime": "2019-07-30T21:45:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "647157010473"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8838f0d9-5722-4a5c-91e3-841651a922f", "record_id": "flaws_cloudtrail:0000106:8838f0d9-5722-4a5c-91e3-841651a922f", "row_index": 106, "timestamp": "2019-07-30T21:45:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8838f0d9-5722-4a5c-91e3-841651a922f", "eventTime": "2019-07-30T21:45:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "647157010473"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ac9d538-1887-4598-8613-06cd3b3bf766", "record_id": "flaws_cloudtrail:0000107:2ac9d538-1887-4598-8613-06cd3b3bf766", "row_index": 107, "timestamp": "2019-07-30T21:45:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ac9d538-1887-4598-8613-06cd3b3bf766", "eventTime": "2019-07-30T21:45:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "647157010473"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ac9d538-1887-4598-8613-06cd3b3bf766", "record_id": "flaws_cloudtrail:0000108:2ac9d538-1887-4598-8613-06cd3b3bf766", "row_index": 108, "timestamp": "2019-07-30T21:45:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ac9d538-1887-4598-8613-06cd3b3bf766", "eventTime": "2019-07-30T21:45:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "647157010473"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30b8a2c1-6d06-44a5-b190-bc3b60dbef93", "record_id": "flaws_cloudtrail:0000109:30b8a2c1-6d06-44a5-b190-bc3b60dbef93", "row_index": 109, "timestamp": "2019-07-30T21:45:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30b8a2c1-6d06-44a5-b190-bc3b60dbef93", "eventTime": "2019-07-30T21:45:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "647157010473"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30b8a2c1-6d06-44a5-b190-bc3b60dbef93", "record_id": "flaws_cloudtrail:0000110:30b8a2c1-6d06-44a5-b190-bc3b60dbef93", "row_index": 110, "timestamp": "2019-07-30T21:45:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30b8a2c1-6d06-44a5-b190-bc3b60dbef93", "eventTime": "2019-07-30T21:45:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "647157010473"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3404bb15-9b89-437b-90de-061f5e9ff707", "record_id": "flaws_cloudtrail:0000111:3404bb15-9b89-437b-90de-061f5e9ff707", "row_index": 111, "timestamp": "2019-07-30T21:45:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3404bb15-9b89-437b-90de-061f5e9ff707", "eventTime": "2019-07-30T21:45:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "647157010473"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3404bb15-9b89-437b-90de-061f5e9ff707", "record_id": "flaws_cloudtrail:0000112:3404bb15-9b89-437b-90de-061f5e9ff707", "row_index": 112, "timestamp": "2019-07-30T21:45:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3404bb15-9b89-437b-90de-061f5e9ff707", "eventTime": "2019-07-30T21:45:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "647157010473"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0af8be63-2c76-443b-87ef-46250a835c47", "record_id": "flaws_cloudtrail:0000113:0af8be63-2c76-443b-87ef-46250a835c47", "row_index": 113, "timestamp": "2019-07-30T21:45:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0af8be63-2c76-443b-87ef-46250a835c47", "eventTime": "2019-07-30T21:45:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "647157010473"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0af8be63-2c76-443b-87ef-46250a835c47", "record_id": "flaws_cloudtrail:0000114:0af8be63-2c76-443b-87ef-46250a835c47", "row_index": 114, "timestamp": "2019-07-30T21:45:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0af8be63-2c76-443b-87ef-46250a835c47", "eventTime": "2019-07-30T21:45:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "647157010473"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d8200c7-f961-4e97-aaed-c4709b73071c", "record_id": "flaws_cloudtrail:0000115:9d8200c7-f961-4e97-aaed-c4709b73071c", "row_index": 115, "timestamp": "2019-07-30T21:45:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d8200c7-f961-4e97-aaed-c4709b73071c", "eventTime": "2019-07-30T21:45:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "647157010473"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f7ceae3-94b6-4fa3-ba35-d524b7a334b3", "record_id": "flaws_cloudtrail:0000116:1f7ceae3-94b6-4fa3-ba35-d524b7a334b3", "row_index": 116, "timestamp": "2019-07-30T21:45:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f7ceae3-94b6-4fa3-ba35-d524b7a334b3", "eventTime": "2019-07-30T21:45:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "647157010473"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d8200c7-f961-4e97-aaed-c4709b73071c", "record_id": "flaws_cloudtrail:0000117:9d8200c7-f961-4e97-aaed-c4709b73071c", "row_index": 117, "timestamp": "2019-07-30T21:45:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d8200c7-f961-4e97-aaed-c4709b73071c", "eventTime": "2019-07-30T21:45:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "647157010473"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f7ceae3-94b6-4fa3-ba35-d524b7a334b3", "record_id": "flaws_cloudtrail:0000118:1f7ceae3-94b6-4fa3-ba35-d524b7a334b3", "row_index": 118, "timestamp": "2019-07-30T21:45:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f7ceae3-94b6-4fa3-ba35-d524b7a334b3", "eventTime": "2019-07-30T21:45:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "647157010473"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fedc596e-b9ce-4a34-a40b-fdaf5af30e48", "record_id": "flaws_cloudtrail:0000119:fedc596e-b9ce-4a34-a40b-fdaf5af30e48", "row_index": 119, "timestamp": "2019-07-30T21:45:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fedc596e-b9ce-4a34-a40b-fdaf5af30e48", "eventTime": "2019-07-30T21:45:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "647157010473"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fedc596e-b9ce-4a34-a40b-fdaf5af30e48", "record_id": "flaws_cloudtrail:0000120:fedc596e-b9ce-4a34-a40b-fdaf5af30e48", "row_index": 120, "timestamp": "2019-07-30T21:45:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fedc596e-b9ce-4a34-a40b-fdaf5af30e48", "eventTime": "2019-07-30T21:45:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "647157010473"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e87e469b-8bea-40e3-b32d-53d5c9da1636", "record_id": "flaws_cloudtrail:0000121:e87e469b-8bea-40e3-b32d-53d5c9da1636", "row_index": 121, "timestamp": "2019-07-30T21:45:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e87e469b-8bea-40e3-b32d-53d5c9da1636", "eventTime": "2019-07-30T21:45:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "647157010473"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e87e469b-8bea-40e3-b32d-53d5c9da1636", "record_id": "flaws_cloudtrail:0000122:e87e469b-8bea-40e3-b32d-53d5c9da1636", "row_index": 122, "timestamp": "2019-07-30T21:45:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e87e469b-8bea-40e3-b32d-53d5c9da1636", "eventTime": "2019-07-30T21:45:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "647157010473"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ce7ebab-da6d-45ad-9caf-47ecf560b0f9", "record_id": "flaws_cloudtrail:0000123:7ce7ebab-da6d-45ad-9caf-47ecf560b0f9", "row_index": 123, "timestamp": "2019-07-30T21:45:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ce7ebab-da6d-45ad-9caf-47ecf560b0f9", "eventTime": "2019-07-30T21:45:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "647157010473"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ce7ebab-da6d-45ad-9caf-47ecf560b0f9", "record_id": "flaws_cloudtrail:0000124:7ce7ebab-da6d-45ad-9caf-47ecf560b0f9", "row_index": 124, "timestamp": "2019-07-30T21:45:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ce7ebab-da6d-45ad-9caf-47ecf560b0f9", "eventTime": "2019-07-30T21:45:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "647157010473"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72cd0b8f-156d-40c3-a003-6c976709bef56", "record_id": "flaws_cloudtrail:0000125:72cd0b8f-156d-40c3-a003-6c976709bef56", "row_index": 125, "timestamp": "2019-07-30T21:45:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72cd0b8f-156d-40c3-a003-6c976709bef56", "eventTime": "2019-07-30T21:45:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "647157010473"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72cd0b8f-156d-40c3-a003-6c976709bef56", "record_id": "flaws_cloudtrail:0000126:72cd0b8f-156d-40c3-a003-6c976709bef56", "row_index": 126, "timestamp": "2019-07-30T21:45:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72cd0b8f-156d-40c3-a003-6c976709bef56", "eventTime": "2019-07-30T21:45:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "647157010473"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "061134c6c-1e8f-4a34-9f23-96ff2b3597e2", "record_id": "flaws_cloudtrail:0000127:061134c6c-1e8f-4a34-9f23-96ff2b3597e2", "row_index": 127, "timestamp": "2019-07-30T21:45:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "061134c6c-1e8f-4a34-9f23-96ff2b3597e2", "eventTime": "2019-07-30T21:45:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "647157010473"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "061134c6c-1e8f-4a34-9f23-96ff2b3597e2", "record_id": "flaws_cloudtrail:0000128:061134c6c-1e8f-4a34-9f23-96ff2b3597e2", "row_index": 128, "timestamp": "2019-07-30T21:45:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "061134c6c-1e8f-4a34-9f23-96ff2b3597e2", "eventTime": "2019-07-30T21:45:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "647157010473"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5976cf3-b9a7-4467-ae12-647cd9dd1122", "record_id": "flaws_cloudtrail:0000129:e5976cf3-b9a7-4467-ae12-647cd9dd1122", "row_index": 129, "timestamp": "2019-07-30T21:45:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5976cf3-b9a7-4467-ae12-647cd9dd1122", "eventTime": "2019-07-30T21:45:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "647157010473"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5976cf3-b9a7-4467-ae12-647cd9dd1122", "record_id": "flaws_cloudtrail:0000130:e5976cf3-b9a7-4467-ae12-647cd9dd1122", "row_index": 130, "timestamp": "2019-07-30T21:45:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5976cf3-b9a7-4467-ae12-647cd9dd1122", "eventTime": "2019-07-30T21:45:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "647157010473"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf298900-de6e-440e-9ea0-811cc1e87ecd", "record_id": "flaws_cloudtrail:0000131:cf298900-de6e-440e-9ea0-811cc1e87ecd", "row_index": 131, "timestamp": "2019-07-30T21:45:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf298900-de6e-440e-9ea0-811cc1e87ecd", "eventTime": "2019-07-30T21:45:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "073654784187"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e18990-86af-4b72-ac41-493cb103c024", "record_id": "flaws_cloudtrail:0000132:e18990-86af-4b72-ac41-493cb103c024", "row_index": 132, "timestamp": "2019-07-30T21:45:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e18990-86af-4b72-ac41-493cb103c024", "eventTime": "2019-07-30T21:45:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "073654784187"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf298900-de6e-440e-9ea0-811cc1e87ecd", "record_id": "flaws_cloudtrail:0000133:cf298900-de6e-440e-9ea0-811cc1e87ecd", "row_index": 133, "timestamp": "2019-07-30T21:45:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf298900-de6e-440e-9ea0-811cc1e87ecd", "eventTime": "2019-07-30T21:45:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "073654784187"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e18990-86af-4b72-ac41-493cb103c024", "record_id": "flaws_cloudtrail:0000134:e18990-86af-4b72-ac41-493cb103c024", "row_index": 134, "timestamp": "2019-07-30T21:45:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e18990-86af-4b72-ac41-493cb103c024", "eventTime": "2019-07-30T21:45:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "073654784187"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df8351a0-ac1b-414d-a04e-53bdcd52e7c4", "record_id": "flaws_cloudtrail:0000135:df8351a0-ac1b-414d-a04e-53bdcd52e7c4", "row_index": 135, "timestamp": "2019-07-30T21:45:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df8351a0-ac1b-414d-a04e-53bdcd52e7c4", "eventTime": "2019-07-30T21:45:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "073654784187"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df8351a0-ac1b-414d-a04e-53bdcd52e7c4", "record_id": "flaws_cloudtrail:0000136:df8351a0-ac1b-414d-a04e-53bdcd52e7c4", "row_index": 136, "timestamp": "2019-07-30T21:45:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df8351a0-ac1b-414d-a04e-53bdcd52e7c4", "eventTime": "2019-07-30T21:45:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "073654784187"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "316e61c2-58f6-4f4a-94e1-4940a0bdde2b", "record_id": "flaws_cloudtrail:0000137:316e61c2-58f6-4f4a-94e1-4940a0bdde2b", "row_index": 137, "timestamp": "2019-07-30T21:45:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "316e61c2-58f6-4f4a-94e1-4940a0bdde2b", "eventTime": "2019-07-30T21:45:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "073654784187"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "316e61c2-58f6-4f4a-94e1-4940a0bdde2b", "record_id": "flaws_cloudtrail:0000138:316e61c2-58f6-4f4a-94e1-4940a0bdde2b", "row_index": 138, "timestamp": "2019-07-30T21:45:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "316e61c2-58f6-4f4a-94e1-4940a0bdde2b", "eventTime": "2019-07-30T21:45:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "073654784187"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb65d8de-3c50-48fa-bf27-5ae23faa3474", "record_id": "flaws_cloudtrail:0000139:bb65d8de-3c50-48fa-bf27-5ae23faa3474", "row_index": 139, "timestamp": "2019-07-30T21:45:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb65d8de-3c50-48fa-bf27-5ae23faa3474", "eventTime": "2019-07-30T21:45:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "073654784187"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb65d8de-3c50-48fa-bf27-5ae23faa3474", "record_id": "flaws_cloudtrail:0000140:bb65d8de-3c50-48fa-bf27-5ae23faa3474", "row_index": 140, "timestamp": "2019-07-30T21:45:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb65d8de-3c50-48fa-bf27-5ae23faa3474", "eventTime": "2019-07-30T21:45:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "073654784187"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8245ab56-828c-4b82-b36e-b2d0c5307bff", "record_id": "flaws_cloudtrail:0000141:8245ab56-828c-4b82-b36e-b2d0c5307bff", "row_index": 141, "timestamp": "2019-07-30T21:45:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8245ab56-828c-4b82-b36e-b2d0c5307bff", "eventTime": "2019-07-30T21:45:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "073654784187"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8245ab56-828c-4b82-b36e-b2d0c5307bff", "record_id": "flaws_cloudtrail:0000142:8245ab56-828c-4b82-b36e-b2d0c5307bff", "row_index": 142, "timestamp": "2019-07-30T21:45:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8245ab56-828c-4b82-b36e-b2d0c5307bff", "eventTime": "2019-07-30T21:45:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "073654784187"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9bdea965-a051-4c47-9f2c-301644ae1f45", "record_id": "flaws_cloudtrail:0000143:9bdea965-a051-4c47-9f2c-301644ae1f45", "row_index": 143, "timestamp": "2019-07-30T21:45:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9bdea965-a051-4c47-9f2c-301644ae1f45", "eventTime": "2019-07-30T21:45:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "073654784187"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9bdea965-a051-4c47-9f2c-301644ae1f45", "record_id": "flaws_cloudtrail:0000144:9bdea965-a051-4c47-9f2c-301644ae1f45", "row_index": 144, "timestamp": "2019-07-30T21:45:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9bdea965-a051-4c47-9f2c-301644ae1f45", "eventTime": "2019-07-30T21:45:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "073654784187"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68ed7dc0-4294-43f0-9195-5077f4d2beb6", "record_id": "flaws_cloudtrail:0000145:68ed7dc0-4294-43f0-9195-5077f4d2beb6", "row_index": 145, "timestamp": "2019-07-30T21:45:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68ed7dc0-4294-43f0-9195-5077f4d2beb6", "eventTime": "2019-07-30T21:45:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "073654784187"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68ed7dc0-4294-43f0-9195-5077f4d2beb6", "record_id": "flaws_cloudtrail:0000146:68ed7dc0-4294-43f0-9195-5077f4d2beb6", "row_index": 146, "timestamp": "2019-07-30T21:45:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68ed7dc0-4294-43f0-9195-5077f4d2beb6", "eventTime": "2019-07-30T21:45:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "073654784187"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1ac4259-1d2e-4a29-857e-7258a0c2f8d2", "record_id": "flaws_cloudtrail:0000147:d1ac4259-1d2e-4a29-857e-7258a0c2f8d2", "row_index": 147, "timestamp": "2019-07-30T21:45:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1ac4259-1d2e-4a29-857e-7258a0c2f8d2", "eventTime": "2019-07-30T21:45:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "073654784187"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1ac4259-1d2e-4a29-857e-7258a0c2f8d2", "record_id": "flaws_cloudtrail:0000148:d1ac4259-1d2e-4a29-857e-7258a0c2f8d2", "row_index": 148, "timestamp": "2019-07-30T21:45:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1ac4259-1d2e-4a29-857e-7258a0c2f8d2", "eventTime": "2019-07-30T21:45:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "073654784187"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f1e19e9-0218-4ee8-a017-9c41ec9f2dc8", "record_id": "flaws_cloudtrail:0000149:7f1e19e9-0218-4ee8-a017-9c41ec9f2dc8", "row_index": 149, "timestamp": "2019-07-30T21:45:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f1e19e9-0218-4ee8-a017-9c41ec9f2dc8", "eventTime": "2019-07-30T21:45:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "073654784187"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f1e19e9-0218-4ee8-a017-9c41ec9f2dc8", "record_id": "flaws_cloudtrail:0000150:7f1e19e9-0218-4ee8-a017-9c41ec9f2dc8", "row_index": 150, "timestamp": "2019-07-30T21:45:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f1e19e9-0218-4ee8-a017-9c41ec9f2dc8", "eventTime": "2019-07-30T21:45:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "073654784187"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "042484b68-edec-48a9-bd27-104b8d15cc35", "record_id": "flaws_cloudtrail:0000151:042484b68-edec-48a9-bd27-104b8d15cc35", "row_index": 151, "timestamp": "2019-07-30T21:45:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "042484b68-edec-48a9-bd27-104b8d15cc35", "eventTime": "2019-07-30T21:45:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "073654784187"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "042484b68-edec-48a9-bd27-104b8d15cc35", "record_id": "flaws_cloudtrail:0000152:042484b68-edec-48a9-bd27-104b8d15cc35", "row_index": 152, "timestamp": "2019-07-30T21:45:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "042484b68-edec-48a9-bd27-104b8d15cc35", "eventTime": "2019-07-30T21:45:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "073654784187"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6b9ede3-1035-46f7-8dde-18d57a1f7fed", "record_id": "flaws_cloudtrail:0000153:c6b9ede3-1035-46f7-8dde-18d57a1f7fed", "row_index": 153, "timestamp": "2019-07-30T21:46:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6b9ede3-1035-46f7-8dde-18d57a1f7fed", "eventTime": "2019-07-30T21:46:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "073654784187"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6b9ede3-1035-46f7-8dde-18d57a1f7fed", "record_id": "flaws_cloudtrail:0000154:c6b9ede3-1035-46f7-8dde-18d57a1f7fed", "row_index": 154, "timestamp": "2019-07-30T21:46:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6b9ede3-1035-46f7-8dde-18d57a1f7fed", "eventTime": "2019-07-30T21:46:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "073654784187"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa9d0208-1458-4c40-b111-ca13a19fe16a", "record_id": "flaws_cloudtrail:0000155:aa9d0208-1458-4c40-b111-ca13a19fe16a", "row_index": 155, "timestamp": "2019-07-30T21:46:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa9d0208-1458-4c40-b111-ca13a19fe16a", "eventTime": "2019-07-30T21:46:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "073654784187"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa9d0208-1458-4c40-b111-ca13a19fe16a", "record_id": "flaws_cloudtrail:0000156:aa9d0208-1458-4c40-b111-ca13a19fe16a", "row_index": 156, "timestamp": "2019-07-30T21:46:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa9d0208-1458-4c40-b111-ca13a19fe16a", "eventTime": "2019-07-30T21:46:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "073654784187"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "144189ead-0e1c-4b14-9617-9097ec851bab", "record_id": "flaws_cloudtrail:0000157:144189ead-0e1c-4b14-9617-9097ec851bab", "row_index": 157, "timestamp": "2019-07-30T21:46:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "144189ead-0e1c-4b14-9617-9097ec851bab", "eventTime": "2019-07-30T21:46:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "073654784187"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "144189ead-0e1c-4b14-9617-9097ec851bab", "record_id": "flaws_cloudtrail:0000158:144189ead-0e1c-4b14-9617-9097ec851bab", "row_index": 158, "timestamp": "2019-07-30T21:46:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "144189ead-0e1c-4b14-9617-9097ec851bab", "eventTime": "2019-07-30T21:46:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "073654784187"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfa9a63a-b8d4-4bc5-a90e-1d4315a61cfc", "record_id": "flaws_cloudtrail:0000159:dfa9a63a-b8d4-4bc5-a90e-1d4315a61cfc", "row_index": 159, "timestamp": "2019-07-30T21:46:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfa9a63a-b8d4-4bc5-a90e-1d4315a61cfc", "eventTime": "2019-07-30T21:46:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "073654784187"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfa9a63a-b8d4-4bc5-a90e-1d4315a61cfc", "record_id": "flaws_cloudtrail:0000160:dfa9a63a-b8d4-4bc5-a90e-1d4315a61cfc", "row_index": 160, "timestamp": "2019-07-30T21:46:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfa9a63a-b8d4-4bc5-a90e-1d4315a61cfc", "eventTime": "2019-07-30T21:46:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "073654784187"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d20edcba-d944-4f22-b394-d9b0fc4cd820", "record_id": "flaws_cloudtrail:0000161:d20edcba-d944-4f22-b394-d9b0fc4cd820", "row_index": 161, "timestamp": "2019-07-30T21:46:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d20edcba-d944-4f22-b394-d9b0fc4cd820", "eventTime": "2019-07-30T21:46:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "073654784187"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d20edcba-d944-4f22-b394-d9b0fc4cd820", "record_id": "flaws_cloudtrail:0000162:d20edcba-d944-4f22-b394-d9b0fc4cd820", "row_index": 162, "timestamp": "2019-07-30T21:46:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d20edcba-d944-4f22-b394-d9b0fc4cd820", "eventTime": "2019-07-30T21:46:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "073654784187"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "885e2485-9bbc-4708-878c-886bc85a275d", "record_id": "flaws_cloudtrail:0000163:885e2485-9bbc-4708-878c-886bc85a275d", "row_index": 163, "timestamp": "2019-07-30T21:46:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "885e2485-9bbc-4708-878c-886bc85a275d", "eventTime": "2019-07-30T21:46:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "161487876078"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "885e2485-9bbc-4708-878c-886bc85a275d", "record_id": "flaws_cloudtrail:0000164:885e2485-9bbc-4708-878c-886bc85a275d", "row_index": 164, "timestamp": "2019-07-30T21:46:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "885e2485-9bbc-4708-878c-886bc85a275d", "eventTime": "2019-07-30T21:46:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "161487876078"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a6afd82-c4d7-4563-98f3-d9338c5629e6", "record_id": "flaws_cloudtrail:0000165:3a6afd82-c4d7-4563-98f3-d9338c5629e6", "row_index": 165, "timestamp": "2019-07-30T21:46:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a6afd82-c4d7-4563-98f3-d9338c5629e6", "eventTime": "2019-07-30T21:46:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "161487876078"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a6afd82-c4d7-4563-98f3-d9338c5629e6", "record_id": "flaws_cloudtrail:0000166:3a6afd82-c4d7-4563-98f3-d9338c5629e6", "row_index": 166, "timestamp": "2019-07-30T21:46:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a6afd82-c4d7-4563-98f3-d9338c5629e6", "eventTime": "2019-07-30T21:46:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "161487876078"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2a5ad84-68db-42e4-bf7b-e46d9087d321", "record_id": "flaws_cloudtrail:0000167:a2a5ad84-68db-42e4-bf7b-e46d9087d321", "row_index": 167, "timestamp": "2019-07-30T21:46:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2a5ad84-68db-42e4-bf7b-e46d9087d321", "eventTime": "2019-07-30T21:46:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "161487876078"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2535de2-5ca0-49ba-91fc-34483b4ba9b8", "record_id": "flaws_cloudtrail:0000168:b2535de2-5ca0-49ba-91fc-34483b4ba9b8", "row_index": 168, "timestamp": "2019-07-30T21:46:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2535de2-5ca0-49ba-91fc-34483b4ba9b8", "eventTime": "2019-07-30T21:46:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "161487876078"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2a5ad84-68db-42e4-bf7b-e46d9087d321", "record_id": "flaws_cloudtrail:0000169:a2a5ad84-68db-42e4-bf7b-e46d9087d321", "row_index": 169, "timestamp": "2019-07-30T21:46:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2a5ad84-68db-42e4-bf7b-e46d9087d321", "eventTime": "2019-07-30T21:46:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "161487876078"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2535de2-5ca0-49ba-91fc-34483b4ba9b8", "record_id": "flaws_cloudtrail:0000170:b2535de2-5ca0-49ba-91fc-34483b4ba9b8", "row_index": 170, "timestamp": "2019-07-30T21:46:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2535de2-5ca0-49ba-91fc-34483b4ba9b8", "eventTime": "2019-07-30T21:46:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "161487876078"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c22e6c5b-feb2-421e-856d-ef5462a5980c", "record_id": "flaws_cloudtrail:0000171:c22e6c5b-feb2-421e-856d-ef5462a5980c", "row_index": 171, "timestamp": "2019-07-30T21:46:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c22e6c5b-feb2-421e-856d-ef5462a5980c", "eventTime": "2019-07-30T21:46:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "161487876078"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c22e6c5b-feb2-421e-856d-ef5462a5980c", "record_id": "flaws_cloudtrail:0000172:c22e6c5b-feb2-421e-856d-ef5462a5980c", "row_index": 172, "timestamp": "2019-07-30T21:46:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c22e6c5b-feb2-421e-856d-ef5462a5980c", "eventTime": "2019-07-30T21:46:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "161487876078"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40589-55a2-4d8a-9e7a-e986e129773f", "record_id": "flaws_cloudtrail:0000173:40589-55a2-4d8a-9e7a-e986e129773f", "row_index": 173, "timestamp": "2019-07-30T21:46:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40589-55a2-4d8a-9e7a-e986e129773f", "eventTime": "2019-07-30T21:46:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "161487876078"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40589-55a2-4d8a-9e7a-e986e129773f", "record_id": "flaws_cloudtrail:0000174:40589-55a2-4d8a-9e7a-e986e129773f", "row_index": 174, "timestamp": "2019-07-30T21:46:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40589-55a2-4d8a-9e7a-e986e129773f", "eventTime": "2019-07-30T21:46:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "161487876078"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9941ae6-53a2-4cfc-aecc-e5a88db45694", "record_id": "flaws_cloudtrail:0000175:e9941ae6-53a2-4cfc-aecc-e5a88db45694", "row_index": 175, "timestamp": "2019-07-30T21:46:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9941ae6-53a2-4cfc-aecc-e5a88db45694", "eventTime": "2019-07-30T21:46:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "161487876078"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9941ae6-53a2-4cfc-aecc-e5a88db45694", "record_id": "flaws_cloudtrail:0000176:e9941ae6-53a2-4cfc-aecc-e5a88db45694", "row_index": 176, "timestamp": "2019-07-30T21:46:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9941ae6-53a2-4cfc-aecc-e5a88db45694", "eventTime": "2019-07-30T21:46:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "161487876078"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d39e821-833a-4de2-b258-c64c95eecb0c", "record_id": "flaws_cloudtrail:0000177:9d39e821-833a-4de2-b258-c64c95eecb0c", "row_index": 177, "timestamp": "2019-07-30T21:46:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d39e821-833a-4de2-b258-c64c95eecb0c", "eventTime": "2019-07-30T21:46:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "161487876078"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d39e821-833a-4de2-b258-c64c95eecb0c", "record_id": "flaws_cloudtrail:0000178:9d39e821-833a-4de2-b258-c64c95eecb0c", "row_index": 178, "timestamp": "2019-07-30T21:46:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d39e821-833a-4de2-b258-c64c95eecb0c", "eventTime": "2019-07-30T21:46:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "161487876078"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a97564b-8528-42c3-b235-12b82bc6b90f", "record_id": "flaws_cloudtrail:0000179:6a97564b-8528-42c3-b235-12b82bc6b90f", "row_index": 179, "timestamp": "2019-07-30T21:46:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a97564b-8528-42c3-b235-12b82bc6b90f", "eventTime": "2019-07-30T21:46:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "161487876078"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a97564b-8528-42c3-b235-12b82bc6b90f", "record_id": "flaws_cloudtrail:0000180:6a97564b-8528-42c3-b235-12b82bc6b90f", "row_index": 180, "timestamp": "2019-07-30T21:46:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a97564b-8528-42c3-b235-12b82bc6b90f", "eventTime": "2019-07-30T21:46:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "161487876078"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f60718-8bc5-4664-b953-c027ff44df14", "record_id": "flaws_cloudtrail:0000181:1f60718-8bc5-4664-b953-c027ff44df14", "row_index": 181, "timestamp": "2019-07-30T21:46:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f60718-8bc5-4664-b953-c027ff44df14", "eventTime": "2019-07-30T21:46:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "161487876078"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f60718-8bc5-4664-b953-c027ff44df14", "record_id": "flaws_cloudtrail:0000182:1f60718-8bc5-4664-b953-c027ff44df14", "row_index": 182, "timestamp": "2019-07-30T21:46:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f60718-8bc5-4664-b953-c027ff44df14", "eventTime": "2019-07-30T21:46:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "161487876078"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0d80e7a-cb3c-4197-bd42-5d4b128124f2a", "record_id": "flaws_cloudtrail:0000183:e0d80e7a-cb3c-4197-bd42-5d4b128124f2a", "row_index": 183, "timestamp": "2019-07-30T21:46:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0d80e7a-cb3c-4197-bd42-5d4b128124f2a", "eventTime": "2019-07-30T21:46:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "161487876078"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0d80e7a-cb3c-4197-bd42-5d4b128124f2a", "record_id": "flaws_cloudtrail:0000184:e0d80e7a-cb3c-4197-bd42-5d4b128124f2a", "row_index": 184, "timestamp": "2019-07-30T21:46:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0d80e7a-cb3c-4197-bd42-5d4b128124f2a", "eventTime": "2019-07-30T21:46:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "161487876078"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1dec1d2a-fe78-4178-9cda-427cb060bb9c", "record_id": "flaws_cloudtrail:0000185:1dec1d2a-fe78-4178-9cda-427cb060bb9c", "row_index": 185, "timestamp": "2019-07-30T21:46:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1dec1d2a-fe78-4178-9cda-427cb060bb9c", "eventTime": "2019-07-30T21:46:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "161487876078"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1dec1d2a-fe78-4178-9cda-427cb060bb9c", "record_id": "flaws_cloudtrail:0000186:1dec1d2a-fe78-4178-9cda-427cb060bb9c", "row_index": 186, "timestamp": "2019-07-30T21:46:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1dec1d2a-fe78-4178-9cda-427cb060bb9c", "eventTime": "2019-07-30T21:46:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "161487876078"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9d148ae-bd02-498e-8dc2-fd84f74bb4b1", "record_id": "flaws_cloudtrail:0000187:a9d148ae-bd02-498e-8dc2-fd84f74bb4b1", "row_index": 187, "timestamp": "2019-07-30T21:46:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9d148ae-bd02-498e-8dc2-fd84f74bb4b1", "eventTime": "2019-07-30T21:46:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "161487876078"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9d148ae-bd02-498e-8dc2-fd84f74bb4b1", "record_id": "flaws_cloudtrail:0000188:a9d148ae-bd02-498e-8dc2-fd84f74bb4b1", "row_index": 188, "timestamp": "2019-07-30T21:46:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9d148ae-bd02-498e-8dc2-fd84f74bb4b1", "eventTime": "2019-07-30T21:46:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "161487876078"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b46fcdb3-34e8-42a4-87ba-2eeaa3454a17", "record_id": "flaws_cloudtrail:0000189:b46fcdb3-34e8-42a4-87ba-2eeaa3454a17", "row_index": 189, "timestamp": "2019-07-30T21:46:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b46fcdb3-34e8-42a4-87ba-2eeaa3454a17", "eventTime": "2019-07-30T21:46:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "161487876078"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b46fcdb3-34e8-42a4-87ba-2eeaa3454a17", "record_id": "flaws_cloudtrail:0000190:b46fcdb3-34e8-42a4-87ba-2eeaa3454a17", "row_index": 190, "timestamp": "2019-07-30T21:46:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b46fcdb3-34e8-42a4-87ba-2eeaa3454a17", "eventTime": "2019-07-30T21:46:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "161487876078"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1dd54bdc-27f7-4f84-93e5-209000d860595d", "record_id": "flaws_cloudtrail:0000191:1dd54bdc-27f7-4f84-93e5-209000d860595d", "row_index": 191, "timestamp": "2019-07-30T21:46:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1dd54bdc-27f7-4f84-93e5-209000d860595d", "eventTime": "2019-07-30T21:46:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "161487876078"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1dd54bdc-27f7-4f84-93e5-209000d860595d", "record_id": "flaws_cloudtrail:0000192:1dd54bdc-27f7-4f84-93e5-209000d860595d", "row_index": 192, "timestamp": "2019-07-30T21:46:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1dd54bdc-27f7-4f84-93e5-209000d860595d", "eventTime": "2019-07-30T21:46:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "161487876078"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08948c67-dcfc-4bdb-b044-7c414cb9e086", "record_id": "flaws_cloudtrail:0000193:08948c67-dcfc-4bdb-b044-7c414cb9e086", "row_index": 193, "timestamp": "2019-07-30T21:46:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08948c67-dcfc-4bdb-b044-7c414cb9e086", "eventTime": "2019-07-30T21:46:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "161487876078"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08948c67-dcfc-4bdb-b044-7c414cb9e086", "record_id": "flaws_cloudtrail:0000194:08948c67-dcfc-4bdb-b044-7c414cb9e086", "row_index": 194, "timestamp": "2019-07-30T21:46:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08948c67-dcfc-4bdb-b044-7c414cb9e086", "eventTime": "2019-07-30T21:46:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "161487876078"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61519ba6-9fe2-4e9a-a9b9-0222db643b7f", "record_id": "flaws_cloudtrail:0000195:61519ba6-9fe2-4e9a-a9b9-0222db643b7f", "row_index": 195, "timestamp": "2019-07-30T21:46:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61519ba6-9fe2-4e9a-a9b9-0222db643b7f", "eventTime": "2019-07-30T21:46:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "447937904280"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61519ba6-9fe2-4e9a-a9b9-0222db643b7f", "record_id": "flaws_cloudtrail:0000196:61519ba6-9fe2-4e9a-a9b9-0222db643b7f", "row_index": 196, "timestamp": "2019-07-30T21:46:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61519ba6-9fe2-4e9a-a9b9-0222db643b7f", "eventTime": "2019-07-30T21:46:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "447937904280"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd954966-936b-45a0-872d-08a0f6bc0d97", "record_id": "flaws_cloudtrail:0000197:cd954966-936b-45a0-872d-08a0f6bc0d97", "row_index": 197, "timestamp": "2019-07-30T21:46:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd954966-936b-45a0-872d-08a0f6bc0d97", "eventTime": "2019-07-30T21:46:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "447937904280"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd954966-936b-45a0-872d-08a0f6bc0d97", "record_id": "flaws_cloudtrail:0000198:cd954966-936b-45a0-872d-08a0f6bc0d97", "row_index": 198, "timestamp": "2019-07-30T21:46:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd954966-936b-45a0-872d-08a0f6bc0d97", "eventTime": "2019-07-30T21:46:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "447937904280"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cca3bdcc-697b-4c18-9b7f-073e31e822ba", "record_id": "flaws_cloudtrail:0000199:cca3bdcc-697b-4c18-9b7f-073e31e822ba", "row_index": 199, "timestamp": "2019-07-30T21:46:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cca3bdcc-697b-4c18-9b7f-073e31e822ba", "eventTime": "2019-07-30T21:46:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "447937904280"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cca3bdcc-697b-4c18-9b7f-073e31e822ba", "record_id": "flaws_cloudtrail:0000200:cca3bdcc-697b-4c18-9b7f-073e31e822ba", "row_index": 200, "timestamp": "2019-07-30T21:46:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cca3bdcc-697b-4c18-9b7f-073e31e822ba", "eventTime": "2019-07-30T21:46:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "447937904280"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec3c84fe-e768-4d52-a876-c831dc5b8847", "record_id": "flaws_cloudtrail:0000201:ec3c84fe-e768-4d52-a876-c831dc5b8847", "row_index": 201, "timestamp": "2019-07-30T21:46:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec3c84fe-e768-4d52-a876-c831dc5b8847", "eventTime": "2019-07-30T21:46:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "447937904280"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec3c84fe-e768-4d52-a876-c831dc5b8847", "record_id": "flaws_cloudtrail:0000202:ec3c84fe-e768-4d52-a876-c831dc5b8847", "row_index": 202, "timestamp": "2019-07-30T21:46:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec3c84fe-e768-4d52-a876-c831dc5b8847", "eventTime": "2019-07-30T21:46:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "447937904280"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f40ec65-c0fb-44bc-a59d-63c7efbab9f3", "record_id": "flaws_cloudtrail:0000203:8f40ec65-c0fb-44bc-a59d-63c7efbab9f3", "row_index": 203, "timestamp": "2019-07-30T21:46:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f40ec65-c0fb-44bc-a59d-63c7efbab9f3", "eventTime": "2019-07-30T21:46:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "447937904280"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f40ec65-c0fb-44bc-a59d-63c7efbab9f3", "record_id": "flaws_cloudtrail:0000204:8f40ec65-c0fb-44bc-a59d-63c7efbab9f3", "row_index": 204, "timestamp": "2019-07-30T21:46:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f40ec65-c0fb-44bc-a59d-63c7efbab9f3", "eventTime": "2019-07-30T21:46:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "447937904280"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a0f2714-b886-4b0f-bc45-f521e7af93d7", "record_id": "flaws_cloudtrail:0000205:8a0f2714-b886-4b0f-bc45-f521e7af93d7", "row_index": 205, "timestamp": "2019-07-30T21:46:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a0f2714-b886-4b0f-bc45-f521e7af93d7", "eventTime": "2019-07-30T21:46:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "447937904280"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a0f2714-b886-4b0f-bc45-f521e7af93d7", "record_id": "flaws_cloudtrail:0000206:8a0f2714-b886-4b0f-bc45-f521e7af93d7", "row_index": 206, "timestamp": "2019-07-30T21:46:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a0f2714-b886-4b0f-bc45-f521e7af93d7", "eventTime": "2019-07-30T21:46:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "447937904280"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06fe4f81-9754-4dea-8399-0ec4200e26d9", "record_id": "flaws_cloudtrail:0000207:06fe4f81-9754-4dea-8399-0ec4200e26d9", "row_index": 207, "timestamp": "2019-07-30T21:46:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06fe4f81-9754-4dea-8399-0ec4200e26d9", "eventTime": "2019-07-30T21:46:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "447937904280"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06fe4f81-9754-4dea-8399-0ec4200e26d9", "record_id": "flaws_cloudtrail:0000208:06fe4f81-9754-4dea-8399-0ec4200e26d9", "row_index": 208, "timestamp": "2019-07-30T21:46:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06fe4f81-9754-4dea-8399-0ec4200e26d9", "eventTime": "2019-07-30T21:46:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "447937904280"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00f371161-8f70-4acc-b7a0-da4822f9df66", "record_id": "flaws_cloudtrail:0000209:00f371161-8f70-4acc-b7a0-da4822f9df66", "row_index": 209, "timestamp": "2019-07-30T21:46:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00f371161-8f70-4acc-b7a0-da4822f9df66", "eventTime": "2019-07-30T21:46:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "447937904280"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00f371161-8f70-4acc-b7a0-da4822f9df66", "record_id": "flaws_cloudtrail:0000210:00f371161-8f70-4acc-b7a0-da4822f9df66", "row_index": 210, "timestamp": "2019-07-30T21:46:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00f371161-8f70-4acc-b7a0-da4822f9df66", "eventTime": "2019-07-30T21:46:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "447937904280"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7cba1c5-95f5-496f-9aed-f8797647708c", "record_id": "flaws_cloudtrail:0000211:f7cba1c5-95f5-496f-9aed-f8797647708c", "row_index": 211, "timestamp": "2019-07-30T21:46:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7cba1c5-95f5-496f-9aed-f8797647708c", "eventTime": "2019-07-30T21:46:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "447937904280"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7cba1c5-95f5-496f-9aed-f8797647708c", "record_id": "flaws_cloudtrail:0000212:f7cba1c5-95f5-496f-9aed-f8797647708c", "row_index": 212, "timestamp": "2019-07-30T21:46:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7cba1c5-95f5-496f-9aed-f8797647708c", "eventTime": "2019-07-30T21:46:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "447937904280"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f42689-a28c-45ff-976c-32e0e9c6e092", "record_id": "flaws_cloudtrail:0000213:2f42689-a28c-45ff-976c-32e0e9c6e092", "row_index": 213, "timestamp": "2019-07-30T21:46:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f42689-a28c-45ff-976c-32e0e9c6e092", "eventTime": "2019-07-30T21:46:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "447937904280"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f42689-a28c-45ff-976c-32e0e9c6e092", "record_id": "flaws_cloudtrail:0000214:2f42689-a28c-45ff-976c-32e0e9c6e092", "row_index": 214, "timestamp": "2019-07-30T21:46:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f42689-a28c-45ff-976c-32e0e9c6e092", "eventTime": "2019-07-30T21:46:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "447937904280"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d122dc1-5744-409e-9a4e-eeabc9ffc878", "record_id": "flaws_cloudtrail:0000215:7d122dc1-5744-409e-9a4e-eeabc9ffc878", "row_index": 215, "timestamp": "2019-07-30T21:46:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d122dc1-5744-409e-9a4e-eeabc9ffc878", "eventTime": "2019-07-30T21:46:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "447937904280"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d122dc1-5744-409e-9a4e-eeabc9ffc878", "record_id": "flaws_cloudtrail:0000216:7d122dc1-5744-409e-9a4e-eeabc9ffc878", "row_index": 216, "timestamp": "2019-07-30T21:46:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d122dc1-5744-409e-9a4e-eeabc9ffc878", "eventTime": "2019-07-30T21:46:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "447937904280"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee62b218-37f7-4a88-bc3b-73957462bfac", "record_id": "flaws_cloudtrail:0000217:ee62b218-37f7-4a88-bc3b-73957462bfac", "row_index": 217, "timestamp": "2019-07-30T21:46:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee62b218-37f7-4a88-bc3b-73957462bfac", "eventTime": "2019-07-30T21:46:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "447937904280"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee62b218-37f7-4a88-bc3b-73957462bfac", "record_id": "flaws_cloudtrail:0000218:ee62b218-37f7-4a88-bc3b-73957462bfac", "row_index": 218, "timestamp": "2019-07-30T21:46:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee62b218-37f7-4a88-bc3b-73957462bfac", "eventTime": "2019-07-30T21:46:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "447937904280"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea2626a1-ecdd-41b1-9d0f-8cf46d3e3609", "record_id": "flaws_cloudtrail:0000219:ea2626a1-ecdd-41b1-9d0f-8cf46d3e3609", "row_index": 219, "timestamp": "2019-07-30T21:46:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea2626a1-ecdd-41b1-9d0f-8cf46d3e3609", "eventTime": "2019-07-30T21:46:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "447937904280"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea2626a1-ecdd-41b1-9d0f-8cf46d3e3609", "record_id": "flaws_cloudtrail:0000220:ea2626a1-ecdd-41b1-9d0f-8cf46d3e3609", "row_index": 220, "timestamp": "2019-07-30T21:46:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea2626a1-ecdd-41b1-9d0f-8cf46d3e3609", "eventTime": "2019-07-30T21:46:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "447937904280"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ded829b-4923-4280-a47e-d01f612000df", "record_id": "flaws_cloudtrail:0000221:1ded829b-4923-4280-a47e-d01f612000df", "row_index": 221, "timestamp": "2019-07-30T21:46:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ded829b-4923-4280-a47e-d01f612000df", "eventTime": "2019-07-30T21:46:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "447937904280"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ded829b-4923-4280-a47e-d01f612000df", "record_id": "flaws_cloudtrail:0000222:1ded829b-4923-4280-a47e-d01f612000df", "row_index": 222, "timestamp": "2019-07-30T21:46:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ded829b-4923-4280-a47e-d01f612000df", "eventTime": "2019-07-30T21:46:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "447937904280"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "472dd8e9-16e8-4282-a3e7-44b395261", "record_id": "flaws_cloudtrail:0000223:472dd8e9-16e8-4282-a3e7-44b395261", "row_index": 223, "timestamp": "2019-07-30T21:46:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "472dd8e9-16e8-4282-a3e7-44b395261", "eventTime": "2019-07-30T21:46:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "447937904280"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "472dd8e9-16e8-4282-a3e7-44b395261", "record_id": "flaws_cloudtrail:0000224:472dd8e9-16e8-4282-a3e7-44b395261", "row_index": 224, "timestamp": "2019-07-30T21:46:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "472dd8e9-16e8-4282-a3e7-44b395261", "eventTime": "2019-07-30T21:46:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "447937904280"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64abeb10-9ae7-4398-9a33-a5f49eb2f13d", "record_id": "flaws_cloudtrail:0000225:64abeb10-9ae7-4398-9a33-a5f49eb2f13d", "row_index": 225, "timestamp": "2019-07-30T21:46:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64abeb10-9ae7-4398-9a33-a5f49eb2f13d", "eventTime": "2019-07-30T21:46:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "447937904280"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64abeb10-9ae7-4398-9a33-a5f49eb2f13d", "record_id": "flaws_cloudtrail:0000226:64abeb10-9ae7-4398-9a33-a5f49eb2f13d", "row_index": 226, "timestamp": "2019-07-30T21:46:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64abeb10-9ae7-4398-9a33-a5f49eb2f13d", "eventTime": "2019-07-30T21:46:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "447937904280"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83385d8c-9d71-442c-a88d-bcc08f1e707b", "record_id": "flaws_cloudtrail:0000227:83385d8c-9d71-442c-a88d-bcc08f1e707b", "row_index": 227, "timestamp": "2019-07-30T21:46:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83385d8c-9d71-442c-a88d-bcc08f1e707b", "eventTime": "2019-07-30T21:46:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "986050187964"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f4f872d-9162-4c33-950b-15a7da7e0e10", "record_id": "flaws_cloudtrail:0000228:2f4f872d-9162-4c33-950b-15a7da7e0e10", "row_index": 228, "timestamp": "2019-07-30T21:46:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f4f872d-9162-4c33-950b-15a7da7e0e10", "eventTime": "2019-07-30T21:46:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "986050187964"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83385d8c-9d71-442c-a88d-bcc08f1e707b", "record_id": "flaws_cloudtrail:0000229:83385d8c-9d71-442c-a88d-bcc08f1e707b", "row_index": 229, "timestamp": "2019-07-30T21:46:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83385d8c-9d71-442c-a88d-bcc08f1e707b", "eventTime": "2019-07-30T21:46:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "986050187964"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f4f872d-9162-4c33-950b-15a7da7e0e10", "record_id": "flaws_cloudtrail:0000230:2f4f872d-9162-4c33-950b-15a7da7e0e10", "row_index": 230, "timestamp": "2019-07-30T21:46:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f4f872d-9162-4c33-950b-15a7da7e0e10", "eventTime": "2019-07-30T21:46:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "986050187964"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "799b19ef-710f-4e87-8ecc-f9aa6e74ba90", "record_id": "flaws_cloudtrail:0000231:799b19ef-710f-4e87-8ecc-f9aa6e74ba90", "row_index": 231, "timestamp": "2019-07-30T21:46:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "799b19ef-710f-4e87-8ecc-f9aa6e74ba90", "eventTime": "2019-07-30T21:46:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "986050187964"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "799b19ef-710f-4e87-8ecc-f9aa6e74ba90", "record_id": "flaws_cloudtrail:0000232:799b19ef-710f-4e87-8ecc-f9aa6e74ba90", "row_index": 232, "timestamp": "2019-07-30T21:46:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "799b19ef-710f-4e87-8ecc-f9aa6e74ba90", "eventTime": "2019-07-30T21:46:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "986050187964"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b02e20e-6389-4e71-968b-f3625dedec71", "record_id": "flaws_cloudtrail:0000233:0b02e20e-6389-4e71-968b-f3625dedec71", "row_index": 233, "timestamp": "2019-07-30T21:47:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b02e20e-6389-4e71-968b-f3625dedec71", "eventTime": "2019-07-30T21:47:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "986050187964"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b02e20e-6389-4e71-968b-f3625dedec71", "record_id": "flaws_cloudtrail:0000234:0b02e20e-6389-4e71-968b-f3625dedec71", "row_index": 234, "timestamp": "2019-07-30T21:47:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b02e20e-6389-4e71-968b-f3625dedec71", "eventTime": "2019-07-30T21:47:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "986050187964"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2146bbac-452d-4325-a4f0-df806c2f4748", "record_id": "flaws_cloudtrail:0000235:2146bbac-452d-4325-a4f0-df806c2f4748", "row_index": 235, "timestamp": "2019-07-30T21:47:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2146bbac-452d-4325-a4f0-df806c2f4748", "eventTime": "2019-07-30T21:47:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "986050187964"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2146bbac-452d-4325-a4f0-df806c2f4748", "record_id": "flaws_cloudtrail:0000236:2146bbac-452d-4325-a4f0-df806c2f4748", "row_index": 236, "timestamp": "2019-07-30T21:47:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2146bbac-452d-4325-a4f0-df806c2f4748", "eventTime": "2019-07-30T21:47:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "986050187964"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb753651d-0f28-4b63-b623-7d72eee577368", "record_id": "flaws_cloudtrail:0000237:cb753651d-0f28-4b63-b623-7d72eee577368", "row_index": 237, "timestamp": "2019-07-30T21:47:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb753651d-0f28-4b63-b623-7d72eee577368", "eventTime": "2019-07-30T21:47:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "986050187964"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb753651d-0f28-4b63-b623-7d72eee577368", "record_id": "flaws_cloudtrail:0000238:cb753651d-0f28-4b63-b623-7d72eee577368", "row_index": 238, "timestamp": "2019-07-30T21:47:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb753651d-0f28-4b63-b623-7d72eee577368", "eventTime": "2019-07-30T21:47:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "986050187964"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "616bf4a1-7d6a-4ae1-bb31-9e8936c7b3b1", "record_id": "flaws_cloudtrail:0000239:616bf4a1-7d6a-4ae1-bb31-9e8936c7b3b1", "row_index": 239, "timestamp": "2019-07-30T21:47:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "616bf4a1-7d6a-4ae1-bb31-9e8936c7b3b1", "eventTime": "2019-07-30T21:47:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "986050187964"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "616bf4a1-7d6a-4ae1-bb31-9e8936c7b3b1", "record_id": "flaws_cloudtrail:0000240:616bf4a1-7d6a-4ae1-bb31-9e8936c7b3b1", "row_index": 240, "timestamp": "2019-07-30T21:47:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "616bf4a1-7d6a-4ae1-bb31-9e8936c7b3b1", "eventTime": "2019-07-30T21:47:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "986050187964"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "933cec4c-9aa3-41f6-b5b5-06995eee6", "record_id": "flaws_cloudtrail:0000241:933cec4c-9aa3-41f6-b5b5-06995eee6", "row_index": 241, "timestamp": "2019-07-30T21:47:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "933cec4c-9aa3-41f6-b5b5-06995eee6", "eventTime": "2019-07-30T21:47:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "986050187964"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "933cec4c-9aa3-41f6-b5b5-06995eee6", "record_id": "flaws_cloudtrail:0000242:933cec4c-9aa3-41f6-b5b5-06995eee6", "row_index": 242, "timestamp": "2019-07-30T21:47:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "933cec4c-9aa3-41f6-b5b5-06995eee6", "eventTime": "2019-07-30T21:47:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "986050187964"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9090ab3-0a0b-4ae9-8bb3-d30a42947df9", "record_id": "flaws_cloudtrail:0000243:c9090ab3-0a0b-4ae9-8bb3-d30a42947df9", "row_index": 243, "timestamp": "2019-07-30T21:47:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9090ab3-0a0b-4ae9-8bb3-d30a42947df9", "eventTime": "2019-07-30T21:47:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "986050187964"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9090ab3-0a0b-4ae9-8bb3-d30a42947df9", "record_id": "flaws_cloudtrail:0000244:c9090ab3-0a0b-4ae9-8bb3-d30a42947df9", "row_index": 244, "timestamp": "2019-07-30T21:47:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9090ab3-0a0b-4ae9-8bb3-d30a42947df9", "eventTime": "2019-07-30T21:47:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "986050187964"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd85c2ac-7d90-471f-b107-89d425e1c7d3", "record_id": "flaws_cloudtrail:0000245:dd85c2ac-7d90-471f-b107-89d425e1c7d3", "row_index": 245, "timestamp": "2019-07-30T21:47:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd85c2ac-7d90-471f-b107-89d425e1c7d3", "eventTime": "2019-07-30T21:47:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "986050187964"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd85c2ac-7d90-471f-b107-89d425e1c7d3", "record_id": "flaws_cloudtrail:0000246:dd85c2ac-7d90-471f-b107-89d425e1c7d3", "row_index": 246, "timestamp": "2019-07-30T21:47:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd85c2ac-7d90-471f-b107-89d425e1c7d3", "eventTime": "2019-07-30T21:47:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "986050187964"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "379dbec8-0acf-4f2f-9ab5-3659d4c7f5db", "record_id": "flaws_cloudtrail:0000247:379dbec8-0acf-4f2f-9ab5-3659d4c7f5db", "row_index": 247, "timestamp": "2019-07-30T21:47:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "379dbec8-0acf-4f2f-9ab5-3659d4c7f5db", "eventTime": "2019-07-30T21:47:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "986050187964"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "379dbec8-0acf-4f2f-9ab5-3659d4c7f5db", "record_id": "flaws_cloudtrail:0000248:379dbec8-0acf-4f2f-9ab5-3659d4c7f5db", "row_index": 248, "timestamp": "2019-07-30T21:47:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "379dbec8-0acf-4f2f-9ab5-3659d4c7f5db", "eventTime": "2019-07-30T21:47:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "986050187964"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bcf901cc-eaad-4ffc-9054-025ae2b7347f", "record_id": "flaws_cloudtrail:0000249:bcf901cc-eaad-4ffc-9054-025ae2b7347f", "row_index": 249, "timestamp": "2019-07-30T21:47:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bcf901cc-eaad-4ffc-9054-025ae2b7347f", "eventTime": "2019-07-30T21:47:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "986050187964"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bcf901cc-eaad-4ffc-9054-025ae2b7347f", "record_id": "flaws_cloudtrail:0000250:bcf901cc-eaad-4ffc-9054-025ae2b7347f", "row_index": 250, "timestamp": "2019-07-30T21:47:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bcf901cc-eaad-4ffc-9054-025ae2b7347f", "eventTime": "2019-07-30T21:47:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "986050187964"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a222f69a-5629-47ff-b789-259ec602cd0b", "record_id": "flaws_cloudtrail:0000251:a222f69a-5629-47ff-b789-259ec602cd0b", "row_index": 251, "timestamp": "2019-07-30T21:47:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a222f69a-5629-47ff-b789-259ec602cd0b", "eventTime": "2019-07-30T21:47:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "986050187964"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a222f69a-5629-47ff-b789-259ec602cd0b", "record_id": "flaws_cloudtrail:0000252:a222f69a-5629-47ff-b789-259ec602cd0b", "row_index": 252, "timestamp": "2019-07-30T21:47:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a222f69a-5629-47ff-b789-259ec602cd0b", "eventTime": "2019-07-30T21:47:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "986050187964"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e64c43bf-a0ac-40f0-98c4-7020fa27ec26", "record_id": "flaws_cloudtrail:0000253:e64c43bf-a0ac-40f0-98c4-7020fa27ec26", "row_index": 253, "timestamp": "2019-07-30T21:47:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e64c43bf-a0ac-40f0-98c4-7020fa27ec26", "eventTime": "2019-07-30T21:47:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "986050187964"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e64c43bf-a0ac-40f0-98c4-7020fa27ec26", "record_id": "flaws_cloudtrail:0000254:e64c43bf-a0ac-40f0-98c4-7020fa27ec26", "row_index": 254, "timestamp": "2019-07-30T21:47:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e64c43bf-a0ac-40f0-98c4-7020fa27ec26", "eventTime": "2019-07-30T21:47:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "986050187964"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6cdd888c-2e77-4f7a-9ef5-0b6bc38ce9be", "record_id": "flaws_cloudtrail:0000255:6cdd888c-2e77-4f7a-9ef5-0b6bc38ce9be", "row_index": 255, "timestamp": "2019-07-30T21:47:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6cdd888c-2e77-4f7a-9ef5-0b6bc38ce9be", "eventTime": "2019-07-30T21:47:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "986050187964"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6cdd888c-2e77-4f7a-9ef5-0b6bc38ce9be", "record_id": "flaws_cloudtrail:0000256:6cdd888c-2e77-4f7a-9ef5-0b6bc38ce9be", "row_index": 256, "timestamp": "2019-07-30T21:47:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6cdd888c-2e77-4f7a-9ef5-0b6bc38ce9be", "eventTime": "2019-07-30T21:47:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "986050187964"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "362e7ce3-400b-418b-b45f-f90a1a7cc6d7", "record_id": "flaws_cloudtrail:0000257:362e7ce3-400b-418b-b45f-f90a1a7cc6d7", "row_index": 257, "timestamp": "2019-07-30T21:47:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "362e7ce3-400b-418b-b45f-f90a1a7cc6d7", "eventTime": "2019-07-30T21:47:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "986050187964"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "362e7ce3-400b-418b-b45f-f90a1a7cc6d7", "record_id": "flaws_cloudtrail:0000258:362e7ce3-400b-418b-b45f-f90a1a7cc6d7", "row_index": 258, "timestamp": "2019-07-30T21:47:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "362e7ce3-400b-418b-b45f-f90a1a7cc6d7", "eventTime": "2019-07-30T21:47:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "986050187964"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fea0b4a0-7ac2-4c74-af8c-c4997ddd9d8e", "record_id": "flaws_cloudtrail:0000259:fea0b4a0-7ac2-4c74-af8c-c4997ddd9d8e", "row_index": 259, "timestamp": "2019-07-30T21:47:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fea0b4a0-7ac2-4c74-af8c-c4997ddd9d8e", "eventTime": "2019-07-30T21:47:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "798685469333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fea0b4a0-7ac2-4c74-af8c-c4997ddd9d8e", "record_id": "flaws_cloudtrail:0000260:fea0b4a0-7ac2-4c74-af8c-c4997ddd9d8e", "row_index": 260, "timestamp": "2019-07-30T21:47:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fea0b4a0-7ac2-4c74-af8c-c4997ddd9d8e", "eventTime": "2019-07-30T21:47:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "798685469333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2dea55dd-8422-427c-9cba-09b69a09a564", "record_id": "flaws_cloudtrail:0000261:2dea55dd-8422-427c-9cba-09b69a09a564", "row_index": 261, "timestamp": "2019-07-30T21:47:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2dea55dd-8422-427c-9cba-09b69a09a564", "eventTime": "2019-07-30T21:47:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "798685469333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2dea55dd-8422-427c-9cba-09b69a09a564", "record_id": "flaws_cloudtrail:0000262:2dea55dd-8422-427c-9cba-09b69a09a564", "row_index": 262, "timestamp": "2019-07-30T21:47:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2dea55dd-8422-427c-9cba-09b69a09a564", "eventTime": "2019-07-30T21:47:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "798685469333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e74e1a8-db43-4278-82db-74feadfcf52d", "record_id": "flaws_cloudtrail:0000263:2e74e1a8-db43-4278-82db-74feadfcf52d", "row_index": 263, "timestamp": "2019-07-30T21:47:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e74e1a8-db43-4278-82db-74feadfcf52d", "eventTime": "2019-07-30T21:47:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "798685469333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e74e1a8-db43-4278-82db-74feadfcf52d", "record_id": "flaws_cloudtrail:0000264:2e74e1a8-db43-4278-82db-74feadfcf52d", "row_index": 264, "timestamp": "2019-07-30T21:47:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e74e1a8-db43-4278-82db-74feadfcf52d", "eventTime": "2019-07-30T21:47:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "798685469333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8fe52de-88e5-4985-b902-e72f65c071de", "record_id": "flaws_cloudtrail:0000265:d8fe52de-88e5-4985-b902-e72f65c071de", "row_index": 265, "timestamp": "2019-07-30T21:47:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8fe52de-88e5-4985-b902-e72f65c071de", "eventTime": "2019-07-30T21:47:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "798685469333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8fe52de-88e5-4985-b902-e72f65c071de", "record_id": "flaws_cloudtrail:0000266:d8fe52de-88e5-4985-b902-e72f65c071de", "row_index": 266, "timestamp": "2019-07-30T21:47:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8fe52de-88e5-4985-b902-e72f65c071de", "eventTime": "2019-07-30T21:47:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "798685469333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52ea4d83-744d-4c65-8d60-9d7a677b4337", "record_id": "flaws_cloudtrail:0000267:52ea4d83-744d-4c65-8d60-9d7a677b4337", "row_index": 267, "timestamp": "2019-07-30T21:47:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52ea4d83-744d-4c65-8d60-9d7a677b4337", "eventTime": "2019-07-30T21:47:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "798685469333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52ea4d83-744d-4c65-8d60-9d7a677b4337", "record_id": "flaws_cloudtrail:0000268:52ea4d83-744d-4c65-8d60-9d7a677b4337", "row_index": 268, "timestamp": "2019-07-30T21:47:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52ea4d83-744d-4c65-8d60-9d7a677b4337", "eventTime": "2019-07-30T21:47:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "798685469333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2f74ef9-8a7d-4d35-b13b-8f4f5dab48a5", "record_id": "flaws_cloudtrail:0000269:c2f74ef9-8a7d-4d35-b13b-8f4f5dab48a5", "row_index": 269, "timestamp": "2019-07-30T21:47:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2f74ef9-8a7d-4d35-b13b-8f4f5dab48a5", "eventTime": "2019-07-30T21:47:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "798685469333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2f74ef9-8a7d-4d35-b13b-8f4f5dab48a5", "record_id": "flaws_cloudtrail:0000270:c2f74ef9-8a7d-4d35-b13b-8f4f5dab48a5", "row_index": 270, "timestamp": "2019-07-30T21:47:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2f74ef9-8a7d-4d35-b13b-8f4f5dab48a5", "eventTime": "2019-07-30T21:47:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "798685469333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b3c3aeb-e8f4-4070-be7e-40869ccd7332", "record_id": "flaws_cloudtrail:0000271:3b3c3aeb-e8f4-4070-be7e-40869ccd7332", "row_index": 271, "timestamp": "2019-07-30T21:47:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b3c3aeb-e8f4-4070-be7e-40869ccd7332", "eventTime": "2019-07-30T21:47:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "798685469333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b3c3aeb-e8f4-4070-be7e-40869ccd7332", "record_id": "flaws_cloudtrail:0000272:3b3c3aeb-e8f4-4070-be7e-40869ccd7332", "row_index": 272, "timestamp": "2019-07-30T21:47:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b3c3aeb-e8f4-4070-be7e-40869ccd7332", "eventTime": "2019-07-30T21:47:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "798685469333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5765f4e0-bca6-4d9c-8c43-8f54a7fde578", "record_id": "flaws_cloudtrail:0000273:5765f4e0-bca6-4d9c-8c43-8f54a7fde578", "row_index": 273, "timestamp": "2019-07-30T21:47:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5765f4e0-bca6-4d9c-8c43-8f54a7fde578", "eventTime": "2019-07-30T21:47:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "798685469333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5765f4e0-bca6-4d9c-8c43-8f54a7fde578", "record_id": "flaws_cloudtrail:0000274:5765f4e0-bca6-4d9c-8c43-8f54a7fde578", "row_index": 274, "timestamp": "2019-07-30T21:47:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5765f4e0-bca6-4d9c-8c43-8f54a7fde578", "eventTime": "2019-07-30T21:47:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "798685469333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94df1742-7d76-46dc-8653-f786324a082e6", "record_id": "flaws_cloudtrail:0000275:94df1742-7d76-46dc-8653-f786324a082e6", "row_index": 275, "timestamp": "2019-07-30T21:47:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94df1742-7d76-46dc-8653-f786324a082e6", "eventTime": "2019-07-30T21:47:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "798685469333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94df1742-7d76-46dc-8653-f786324a082e6", "record_id": "flaws_cloudtrail:0000276:94df1742-7d76-46dc-8653-f786324a082e6", "row_index": 276, "timestamp": "2019-07-30T21:47:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94df1742-7d76-46dc-8653-f786324a082e6", "eventTime": "2019-07-30T21:47:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "798685469333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57654d74-aca7-4bff-86a1-ed07b834324b", "record_id": "flaws_cloudtrail:0000277:57654d74-aca7-4bff-86a1-ed07b834324b", "row_index": 277, "timestamp": "2019-07-30T21:47:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57654d74-aca7-4bff-86a1-ed07b834324b", "eventTime": "2019-07-30T21:47:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "798685469333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57654d74-aca7-4bff-86a1-ed07b834324b", "record_id": "flaws_cloudtrail:0000278:57654d74-aca7-4bff-86a1-ed07b834324b", "row_index": 278, "timestamp": "2019-07-30T21:47:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57654d74-aca7-4bff-86a1-ed07b834324b", "eventTime": "2019-07-30T21:47:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "798685469333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed3c3174-5e85-4cd9-8b60-77d594e1390d", "record_id": "flaws_cloudtrail:0000279:ed3c3174-5e85-4cd9-8b60-77d594e1390d", "row_index": 279, "timestamp": "2019-07-30T21:47:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed3c3174-5e85-4cd9-8b60-77d594e1390d", "eventTime": "2019-07-30T21:47:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "798685469333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15e109fd-1cb2-4c21-a9ef-c1dd2d922788", "record_id": "flaws_cloudtrail:0000280:15e109fd-1cb2-4c21-a9ef-c1dd2d922788", "row_index": 280, "timestamp": "2019-07-30T21:47:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15e109fd-1cb2-4c21-a9ef-c1dd2d922788", "eventTime": "2019-07-30T21:47:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "798685469333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed3c3174-5e85-4cd9-8b60-77d594e1390d", "record_id": "flaws_cloudtrail:0000281:ed3c3174-5e85-4cd9-8b60-77d594e1390d", "row_index": 281, "timestamp": "2019-07-30T21:47:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed3c3174-5e85-4cd9-8b60-77d594e1390d", "eventTime": "2019-07-30T21:47:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "798685469333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15e109fd-1cb2-4c21-a9ef-c1dd2d922788", "record_id": "flaws_cloudtrail:0000282:15e109fd-1cb2-4c21-a9ef-c1dd2d922788", "row_index": 282, "timestamp": "2019-07-30T21:47:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15e109fd-1cb2-4c21-a9ef-c1dd2d922788", "eventTime": "2019-07-30T21:47:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "798685469333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db446eab-b6a7-4f35-a3f3-337972d4595", "record_id": "flaws_cloudtrail:0000283:db446eab-b6a7-4f35-a3f3-337972d4595", "row_index": 283, "timestamp": "2019-07-30T21:47:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db446eab-b6a7-4f35-a3f3-337972d4595", "eventTime": "2019-07-30T21:47:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "798685469333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db446eab-b6a7-4f35-a3f3-337972d4595", "record_id": "flaws_cloudtrail:0000284:db446eab-b6a7-4f35-a3f3-337972d4595", "row_index": 284, "timestamp": "2019-07-30T21:47:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db446eab-b6a7-4f35-a3f3-337972d4595", "eventTime": "2019-07-30T21:47:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "798685469333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b88f1f05-88d1-49e9-8379-7e42458bd79", "record_id": "flaws_cloudtrail:0000285:b88f1f05-88d1-49e9-8379-7e42458bd79", "row_index": 285, "timestamp": "2019-07-30T21:47:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b88f1f05-88d1-49e9-8379-7e42458bd79", "eventTime": "2019-07-30T21:47:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "798685469333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b88f1f05-88d1-49e9-8379-7e42458bd79", "record_id": "flaws_cloudtrail:0000286:b88f1f05-88d1-49e9-8379-7e42458bd79", "row_index": 286, "timestamp": "2019-07-30T21:47:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b88f1f05-88d1-49e9-8379-7e42458bd79", "eventTime": "2019-07-30T21:47:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "798685469333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e95ee323-9321-415c-b431-6c1ba1e8400d", "record_id": "flaws_cloudtrail:0000287:e95ee323-9321-415c-b431-6c1ba1e8400d", "row_index": 287, "timestamp": "2019-07-30T21:47:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e95ee323-9321-415c-b431-6c1ba1e8400d", "eventTime": "2019-07-30T21:47:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "798685469333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e95ee323-9321-415c-b431-6c1ba1e8400d", "record_id": "flaws_cloudtrail:0000288:e95ee323-9321-415c-b431-6c1ba1e8400d", "row_index": 288, "timestamp": "2019-07-30T21:47:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e95ee323-9321-415c-b431-6c1ba1e8400d", "eventTime": "2019-07-30T21:47:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "798685469333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00f4cd9f-9380-4260-994c-b5950f311202", "record_id": "flaws_cloudtrail:0000289:00f4cd9f-9380-4260-994c-b5950f311202", "row_index": 289, "timestamp": "2019-07-30T21:47:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00f4cd9f-9380-4260-994c-b5950f311202", "eventTime": "2019-07-30T21:47:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "798685469333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00f4cd9f-9380-4260-994c-b5950f311202", "record_id": "flaws_cloudtrail:0000290:00f4cd9f-9380-4260-994c-b5950f311202", "row_index": 290, "timestamp": "2019-07-30T21:47:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00f4cd9f-9380-4260-994c-b5950f311202", "eventTime": "2019-07-30T21:47:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "798685469333"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9aae17a4-e59f-442e-8d79-5edbb99b5c4f", "record_id": "flaws_cloudtrail:0000291:9aae17a4-e59f-442e-8d79-5edbb99b5c4f", "row_index": 291, "timestamp": "2019-07-30T21:47:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9aae17a4-e59f-442e-8d79-5edbb99b5c4f", "eventTime": "2019-07-30T21:47:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "649949478046"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9aae17a4-e59f-442e-8d79-5edbb99b5c4f", "record_id": "flaws_cloudtrail:0000292:9aae17a4-e59f-442e-8d79-5edbb99b5c4f", "row_index": 292, "timestamp": "2019-07-30T21:47:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9aae17a4-e59f-442e-8d79-5edbb99b5c4f", "eventTime": "2019-07-30T21:47:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "649949478046"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9e26f68-d818-4704-8108-57c6bebc9eff", "record_id": "flaws_cloudtrail:0000293:b9e26f68-d818-4704-8108-57c6bebc9eff", "row_index": 293, "timestamp": "2019-07-30T21:47:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9e26f68-d818-4704-8108-57c6bebc9eff", "eventTime": "2019-07-30T21:47:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "649949478046"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9e26f68-d818-4704-8108-57c6bebc9eff", "record_id": "flaws_cloudtrail:0000294:b9e26f68-d818-4704-8108-57c6bebc9eff", "row_index": 294, "timestamp": "2019-07-30T21:47:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9e26f68-d818-4704-8108-57c6bebc9eff", "eventTime": "2019-07-30T21:47:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "649949478046"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c41b54e6-e792-4cdb-a8f5-d846b00a1c55", "record_id": "flaws_cloudtrail:0000295:c41b54e6-e792-4cdb-a8f5-d846b00a1c55", "row_index": 295, "timestamp": "2019-07-30T21:47:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c41b54e6-e792-4cdb-a8f5-d846b00a1c55", "eventTime": "2019-07-30T21:47:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "649949478046"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8afdb400-34ec-4887-bae6-75a1cd66e276", "record_id": "flaws_cloudtrail:0000296:8afdb400-34ec-4887-bae6-75a1cd66e276", "row_index": 296, "timestamp": "2019-07-30T21:47:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8afdb400-34ec-4887-bae6-75a1cd66e276", "eventTime": "2019-07-30T21:47:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "649949478046"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c41b54e6-e792-4cdb-a8f5-d846b00a1c55", "record_id": "flaws_cloudtrail:0000297:c41b54e6-e792-4cdb-a8f5-d846b00a1c55", "row_index": 297, "timestamp": "2019-07-30T21:47:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c41b54e6-e792-4cdb-a8f5-d846b00a1c55", "eventTime": "2019-07-30T21:47:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "649949478046"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8afdb400-34ec-4887-bae6-75a1cd66e276", "record_id": "flaws_cloudtrail:0000298:8afdb400-34ec-4887-bae6-75a1cd66e276", "row_index": 298, "timestamp": "2019-07-30T21:47:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8afdb400-34ec-4887-bae6-75a1cd66e276", "eventTime": "2019-07-30T21:47:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "649949478046"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f99bc88d-19d1-4ea6-8dc9-219955c6d4d", "record_id": "flaws_cloudtrail:0000299:f99bc88d-19d1-4ea6-8dc9-219955c6d4d", "row_index": 299, "timestamp": "2019-07-30T21:47:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f99bc88d-19d1-4ea6-8dc9-219955c6d4d", "eventTime": "2019-07-30T21:47:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "649949478046"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f99bc88d-19d1-4ea6-8dc9-219955c6d4d", "record_id": "flaws_cloudtrail:0000300:f99bc88d-19d1-4ea6-8dc9-219955c6d4d", "row_index": 300, "timestamp": "2019-07-30T21:47:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f99bc88d-19d1-4ea6-8dc9-219955c6d4d", "eventTime": "2019-07-30T21:47:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "649949478046"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "417aaf75-f442-4f55-985e-b26a4b4da2cf", "record_id": "flaws_cloudtrail:0000301:417aaf75-f442-4f55-985e-b26a4b4da2cf", "row_index": 301, "timestamp": "2019-07-30T21:47:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "417aaf75-f442-4f55-985e-b26a4b4da2cf", "eventTime": "2019-07-30T21:47:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "649949478046"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "417aaf75-f442-4f55-985e-b26a4b4da2cf", "record_id": "flaws_cloudtrail:0000302:417aaf75-f442-4f55-985e-b26a4b4da2cf", "row_index": 302, "timestamp": "2019-07-30T21:47:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "417aaf75-f442-4f55-985e-b26a4b4da2cf", "eventTime": "2019-07-30T21:47:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "649949478046"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b372f746-37a9-4dea-a370-7b2f40040e0", "record_id": "flaws_cloudtrail:0000303:b372f746-37a9-4dea-a370-7b2f40040e0", "row_index": 303, "timestamp": "2019-07-30T21:47:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b372f746-37a9-4dea-a370-7b2f40040e0", "eventTime": "2019-07-30T21:47:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "649949478046"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b372f746-37a9-4dea-a370-7b2f40040e0", "record_id": "flaws_cloudtrail:0000304:b372f746-37a9-4dea-a370-7b2f40040e0", "row_index": 304, "timestamp": "2019-07-30T21:47:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b372f746-37a9-4dea-a370-7b2f40040e0", "eventTime": "2019-07-30T21:47:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "649949478046"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9deec7a-2ccc-45fd-a13c-a666724881f3", "record_id": "flaws_cloudtrail:0000305:d9deec7a-2ccc-45fd-a13c-a666724881f3", "row_index": 305, "timestamp": "2019-07-30T21:47:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9deec7a-2ccc-45fd-a13c-a666724881f3", "eventTime": "2019-07-30T21:47:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "649949478046"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9deec7a-2ccc-45fd-a13c-a666724881f3", "record_id": "flaws_cloudtrail:0000306:d9deec7a-2ccc-45fd-a13c-a666724881f3", "row_index": 306, "timestamp": "2019-07-30T21:47:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9deec7a-2ccc-45fd-a13c-a666724881f3", "eventTime": "2019-07-30T21:47:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "649949478046"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef293576d-fdf4-4f7c-a5f4-37223c8490", "record_id": "flaws_cloudtrail:0000307:ef293576d-fdf4-4f7c-a5f4-37223c8490", "row_index": 307, "timestamp": "2019-07-30T21:48:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef293576d-fdf4-4f7c-a5f4-37223c8490", "eventTime": "2019-07-30T21:48:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "649949478046"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60763d6c-d1e7-472b-92e5-8a48380bc3", "record_id": "flaws_cloudtrail:0000308:60763d6c-d1e7-472b-92e5-8a48380bc3", "row_index": 308, "timestamp": "2019-07-30T21:48:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60763d6c-d1e7-472b-92e5-8a48380bc3", "eventTime": "2019-07-30T21:48:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "649949478046"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef293576d-fdf4-4f7c-a5f4-37223c8490", "record_id": "flaws_cloudtrail:0000309:ef293576d-fdf4-4f7c-a5f4-37223c8490", "row_index": 309, "timestamp": "2019-07-30T21:48:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef293576d-fdf4-4f7c-a5f4-37223c8490", "eventTime": "2019-07-30T21:48:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "649949478046"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60763d6c-d1e7-472b-92e5-8a48380bc3", "record_id": "flaws_cloudtrail:0000310:60763d6c-d1e7-472b-92e5-8a48380bc3", "row_index": 310, "timestamp": "2019-07-30T21:48:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60763d6c-d1e7-472b-92e5-8a48380bc3", "eventTime": "2019-07-30T21:48:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "649949478046"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11099de-f328-4fe6-bac0-8e3297bcf516", "record_id": "flaws_cloudtrail:0000311:11099de-f328-4fe6-bac0-8e3297bcf516", "row_index": 311, "timestamp": "2019-07-30T21:48:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11099de-f328-4fe6-bac0-8e3297bcf516", "eventTime": "2019-07-30T21:48:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "649949478046"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11099de-f328-4fe6-bac0-8e3297bcf516", "record_id": "flaws_cloudtrail:0000312:11099de-f328-4fe6-bac0-8e3297bcf516", "row_index": 312, "timestamp": "2019-07-30T21:48:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11099de-f328-4fe6-bac0-8e3297bcf516", "eventTime": "2019-07-30T21:48:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "649949478046"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fcb95ef1-b322-4f35-b81c-d44db27483da", "record_id": "flaws_cloudtrail:0000313:fcb95ef1-b322-4f35-b81c-d44db27483da", "row_index": 313, "timestamp": "2019-07-30T21:48:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fcb95ef1-b322-4f35-b81c-d44db27483da", "eventTime": "2019-07-30T21:48:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "649949478046"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fcb95ef1-b322-4f35-b81c-d44db27483da", "record_id": "flaws_cloudtrail:0000314:fcb95ef1-b322-4f35-b81c-d44db27483da", "row_index": 314, "timestamp": "2019-07-30T21:48:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fcb95ef1-b322-4f35-b81c-d44db27483da", "eventTime": "2019-07-30T21:48:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "649949478046"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a3972f7-308f-4432-af38-7e42da385269e", "record_id": "flaws_cloudtrail:0000315:7a3972f7-308f-4432-af38-7e42da385269e", "row_index": 315, "timestamp": "2019-07-30T21:48:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a3972f7-308f-4432-af38-7e42da385269e", "eventTime": "2019-07-30T21:48:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "649949478046"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a3972f7-308f-4432-af38-7e42da385269e", "record_id": "flaws_cloudtrail:0000316:7a3972f7-308f-4432-af38-7e42da385269e", "row_index": 316, "timestamp": "2019-07-30T21:48:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a3972f7-308f-4432-af38-7e42da385269e", "eventTime": "2019-07-30T21:48:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "649949478046"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e566af0-55ce-4b69-8067-ab6c19559ff8", "record_id": "flaws_cloudtrail:0000317:4e566af0-55ce-4b69-8067-ab6c19559ff8", "row_index": 317, "timestamp": "2019-07-30T21:48:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e566af0-55ce-4b69-8067-ab6c19559ff8", "eventTime": "2019-07-30T21:48:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "649949478046"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e566af0-55ce-4b69-8067-ab6c19559ff8", "record_id": "flaws_cloudtrail:0000318:4e566af0-55ce-4b69-8067-ab6c19559ff8", "row_index": 318, "timestamp": "2019-07-30T21:48:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e566af0-55ce-4b69-8067-ab6c19559ff8", "eventTime": "2019-07-30T21:48:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "649949478046"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3db8aaea-e8fa-4a84-9d02-58d835fe0ffb", "record_id": "flaws_cloudtrail:0000319:3db8aaea-e8fa-4a84-9d02-58d835fe0ffb", "row_index": 319, "timestamp": "2019-07-30T21:48:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3db8aaea-e8fa-4a84-9d02-58d835fe0ffb", "eventTime": "2019-07-30T21:48:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "649949478046"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3db8aaea-e8fa-4a84-9d02-58d835fe0ffb", "record_id": "flaws_cloudtrail:0000320:3db8aaea-e8fa-4a84-9d02-58d835fe0ffb", "row_index": 320, "timestamp": "2019-07-30T21:48:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3db8aaea-e8fa-4a84-9d02-58d835fe0ffb", "eventTime": "2019-07-30T21:48:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "649949478046"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e08ac83-ccdb-423d-8fdb-81be8a60a995", "record_id": "flaws_cloudtrail:0000321:1e08ac83-ccdb-423d-8fdb-81be8a60a995", "row_index": 321, "timestamp": "2019-07-30T21:48:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e08ac83-ccdb-423d-8fdb-81be8a60a995", "eventTime": "2019-07-30T21:48:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "649949478046"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e08ac83-ccdb-423d-8fdb-81be8a60a995", "record_id": "flaws_cloudtrail:0000322:1e08ac83-ccdb-423d-8fdb-81be8a60a995", "row_index": 322, "timestamp": "2019-07-30T21:48:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e08ac83-ccdb-423d-8fdb-81be8a60a995", "eventTime": "2019-07-30T21:48:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "649949478046"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8c9da5f-391d-4340-b39f-cac264d8ca21", "record_id": "flaws_cloudtrail:0000323:b8c9da5f-391d-4340-b39f-cac264d8ca21", "row_index": 323, "timestamp": "2019-07-30T21:48:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8c9da5f-391d-4340-b39f-cac264d8ca21", "eventTime": "2019-07-30T21:48:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "576564155991"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8c9da5f-391d-4340-b39f-cac264d8ca21", "record_id": "flaws_cloudtrail:0000324:b8c9da5f-391d-4340-b39f-cac264d8ca21", "row_index": 324, "timestamp": "2019-07-30T21:48:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8c9da5f-391d-4340-b39f-cac264d8ca21", "eventTime": "2019-07-30T21:48:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "576564155991"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "689fdc1e-5f3f-4a5d-a790-b826b2cee9e5", "record_id": "flaws_cloudtrail:0000325:689fdc1e-5f3f-4a5d-a790-b826b2cee9e5", "row_index": 325, "timestamp": "2019-07-30T21:48:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "689fdc1e-5f3f-4a5d-a790-b826b2cee9e5", "eventTime": "2019-07-30T21:48:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "576564155991"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "689fdc1e-5f3f-4a5d-a790-b826b2cee9e5", "record_id": "flaws_cloudtrail:0000326:689fdc1e-5f3f-4a5d-a790-b826b2cee9e5", "row_index": 326, "timestamp": "2019-07-30T21:48:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "689fdc1e-5f3f-4a5d-a790-b826b2cee9e5", "eventTime": "2019-07-30T21:48:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "576564155991"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a22397-3a54-4095-a4ad-34fb6e0c9c39", "record_id": "flaws_cloudtrail:0000327:5a22397-3a54-4095-a4ad-34fb6e0c9c39", "row_index": 327, "timestamp": "2019-07-30T21:48:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a22397-3a54-4095-a4ad-34fb6e0c9c39", "eventTime": "2019-07-30T21:48:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "576564155991"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d90dc09f-898b-424e-9a05-4aa8103db73b", "record_id": "flaws_cloudtrail:0000328:d90dc09f-898b-424e-9a05-4aa8103db73b", "row_index": 328, "timestamp": "2019-07-30T21:48:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d90dc09f-898b-424e-9a05-4aa8103db73b", "eventTime": "2019-07-30T21:48:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "576564155991"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a22397-3a54-4095-a4ad-34fb6e0c9c39", "record_id": "flaws_cloudtrail:0000329:5a22397-3a54-4095-a4ad-34fb6e0c9c39", "row_index": 329, "timestamp": "2019-07-30T21:48:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a22397-3a54-4095-a4ad-34fb6e0c9c39", "eventTime": "2019-07-30T21:48:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "576564155991"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d90dc09f-898b-424e-9a05-4aa8103db73b", "record_id": "flaws_cloudtrail:0000330:d90dc09f-898b-424e-9a05-4aa8103db73b", "row_index": 330, "timestamp": "2019-07-30T21:48:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d90dc09f-898b-424e-9a05-4aa8103db73b", "eventTime": "2019-07-30T21:48:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "576564155991"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd02f6b5-c22c-45f7-a21a-b5280016fa5d", "record_id": "flaws_cloudtrail:0000331:fd02f6b5-c22c-45f7-a21a-b5280016fa5d", "row_index": 331, "timestamp": "2019-07-30T21:48:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd02f6b5-c22c-45f7-a21a-b5280016fa5d", "eventTime": "2019-07-30T21:48:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "576564155991"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd02f6b5-c22c-45f7-a21a-b5280016fa5d", "record_id": "flaws_cloudtrail:0000332:fd02f6b5-c22c-45f7-a21a-b5280016fa5d", "row_index": 332, "timestamp": "2019-07-30T21:48:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd02f6b5-c22c-45f7-a21a-b5280016fa5d", "eventTime": "2019-07-30T21:48:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "576564155991"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c29947-68cf-4809-96db-7f1c797f4bd9", "record_id": "flaws_cloudtrail:0000333:1c29947-68cf-4809-96db-7f1c797f4bd9", "row_index": 333, "timestamp": "2019-07-30T21:48:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c29947-68cf-4809-96db-7f1c797f4bd9", "eventTime": "2019-07-30T21:48:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "576564155991"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c29947-68cf-4809-96db-7f1c797f4bd9", "record_id": "flaws_cloudtrail:0000334:1c29947-68cf-4809-96db-7f1c797f4bd9", "row_index": 334, "timestamp": "2019-07-30T21:48:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c29947-68cf-4809-96db-7f1c797f4bd9", "eventTime": "2019-07-30T21:48:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "576564155991"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16e53be1-7f83-41fe-9ab5-436afc893e7a", "record_id": "flaws_cloudtrail:0000335:16e53be1-7f83-41fe-9ab5-436afc893e7a", "row_index": 335, "timestamp": "2019-07-30T21:48:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16e53be1-7f83-41fe-9ab5-436afc893e7a", "eventTime": "2019-07-30T21:48:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "576564155991"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16e53be1-7f83-41fe-9ab5-436afc893e7a", "record_id": "flaws_cloudtrail:0000336:16e53be1-7f83-41fe-9ab5-436afc893e7a", "row_index": 336, "timestamp": "2019-07-30T21:48:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16e53be1-7f83-41fe-9ab5-436afc893e7a", "eventTime": "2019-07-30T21:48:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "576564155991"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e8eca77-2a78-4cdc-98e8-ccc603c0839f", "record_id": "flaws_cloudtrail:0000337:7e8eca77-2a78-4cdc-98e8-ccc603c0839f", "row_index": 337, "timestamp": "2019-07-30T21:48:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e8eca77-2a78-4cdc-98e8-ccc603c0839f", "eventTime": "2019-07-30T21:48:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "576564155991"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e8eca77-2a78-4cdc-98e8-ccc603c0839f", "record_id": "flaws_cloudtrail:0000338:7e8eca77-2a78-4cdc-98e8-ccc603c0839f", "row_index": 338, "timestamp": "2019-07-30T21:48:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e8eca77-2a78-4cdc-98e8-ccc603c0839f", "eventTime": "2019-07-30T21:48:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "576564155991"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be2ae98e-6166-4941-8796-e29e44d711738", "record_id": "flaws_cloudtrail:0000339:be2ae98e-6166-4941-8796-e29e44d711738", "row_index": 339, "timestamp": "2019-07-30T21:48:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be2ae98e-6166-4941-8796-e29e44d711738", "eventTime": "2019-07-30T21:48:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "576564155991"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c35c8b0-2c3a-43bd-bcb6-12d7fb28288", "record_id": "flaws_cloudtrail:0000340:8c35c8b0-2c3a-43bd-bcb6-12d7fb28288", "row_index": 340, "timestamp": "2019-07-30T21:48:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c35c8b0-2c3a-43bd-bcb6-12d7fb28288", "eventTime": "2019-07-30T21:48:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "576564155991"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be2ae98e-6166-4941-8796-e29e44d711738", "record_id": "flaws_cloudtrail:0000341:be2ae98e-6166-4941-8796-e29e44d711738", "row_index": 341, "timestamp": "2019-07-30T21:48:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be2ae98e-6166-4941-8796-e29e44d711738", "eventTime": "2019-07-30T21:48:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "576564155991"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c35c8b0-2c3a-43bd-bcb6-12d7fb28288", "record_id": "flaws_cloudtrail:0000342:8c35c8b0-2c3a-43bd-bcb6-12d7fb28288", "row_index": 342, "timestamp": "2019-07-30T21:48:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c35c8b0-2c3a-43bd-bcb6-12d7fb28288", "eventTime": "2019-07-30T21:48:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "576564155991"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ffbfada-38da-43e3-8073-cad246e4bc06", "record_id": "flaws_cloudtrail:0000343:2ffbfada-38da-43e3-8073-cad246e4bc06", "row_index": 343, "timestamp": "2019-07-30T21:48:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ffbfada-38da-43e3-8073-cad246e4bc06", "eventTime": "2019-07-30T21:48:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "576564155991"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ffbfada-38da-43e3-8073-cad246e4bc06", "record_id": "flaws_cloudtrail:0000344:2ffbfada-38da-43e3-8073-cad246e4bc06", "row_index": 344, "timestamp": "2019-07-30T21:48:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ffbfada-38da-43e3-8073-cad246e4bc06", "eventTime": "2019-07-30T21:48:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "576564155991"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75c75b72-dd80-4927-822b-081425422aef", "record_id": "flaws_cloudtrail:0000345:75c75b72-dd80-4927-822b-081425422aef", "row_index": 345, "timestamp": "2019-07-30T21:48:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75c75b72-dd80-4927-822b-081425422aef", "eventTime": "2019-07-30T21:48:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "576564155991"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75c75b72-dd80-4927-822b-081425422aef", "record_id": "flaws_cloudtrail:0000346:75c75b72-dd80-4927-822b-081425422aef", "row_index": 346, "timestamp": "2019-07-30T21:48:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75c75b72-dd80-4927-822b-081425422aef", "eventTime": "2019-07-30T21:48:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "576564155991"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2838cc2-93de-404d-bee0-04c6b3ca1d3d", "record_id": "flaws_cloudtrail:0000347:f2838cc2-93de-404d-bee0-04c6b3ca1d3d", "row_index": 347, "timestamp": "2019-07-30T21:48:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2838cc2-93de-404d-bee0-04c6b3ca1d3d", "eventTime": "2019-07-30T21:48:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "576564155991"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2838cc2-93de-404d-bee0-04c6b3ca1d3d", "record_id": "flaws_cloudtrail:0000348:f2838cc2-93de-404d-bee0-04c6b3ca1d3d", "row_index": 348, "timestamp": "2019-07-30T21:48:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2838cc2-93de-404d-bee0-04c6b3ca1d3d", "eventTime": "2019-07-30T21:48:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "576564155991"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b5ed147-e928-41af-9a55-66fe0cd5c84d", "record_id": "flaws_cloudtrail:0000349:5b5ed147-e928-41af-9a55-66fe0cd5c84d", "row_index": 349, "timestamp": "2019-07-30T21:48:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b5ed147-e928-41af-9a55-66fe0cd5c84d", "eventTime": "2019-07-30T21:48:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "576564155991"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b5ed147-e928-41af-9a55-66fe0cd5c84d", "record_id": "flaws_cloudtrail:0000350:5b5ed147-e928-41af-9a55-66fe0cd5c84d", "row_index": 350, "timestamp": "2019-07-30T21:48:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b5ed147-e928-41af-9a55-66fe0cd5c84d", "eventTime": "2019-07-30T21:48:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "576564155991"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83d3ef7d-bfaf-4530-8109-854d7cb0f1b7", "record_id": "flaws_cloudtrail:0000351:83d3ef7d-bfaf-4530-8109-854d7cb0f1b7", "row_index": 351, "timestamp": "2019-07-30T21:48:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83d3ef7d-bfaf-4530-8109-854d7cb0f1b7", "eventTime": "2019-07-30T21:48:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "576564155991"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83d3ef7d-bfaf-4530-8109-854d7cb0f1b7", "record_id": "flaws_cloudtrail:0000352:83d3ef7d-bfaf-4530-8109-854d7cb0f1b7", "row_index": 352, "timestamp": "2019-07-30T21:48:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83d3ef7d-bfaf-4530-8109-854d7cb0f1b7", "eventTime": "2019-07-30T21:48:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "576564155991"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "413d3287-9985-4df3-900f-84be5459bef1", "record_id": "flaws_cloudtrail:0000353:413d3287-9985-4df3-900f-84be5459bef1", "row_index": 353, "timestamp": "2019-07-30T21:48:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "413d3287-9985-4df3-900f-84be5459bef1", "eventTime": "2019-07-30T21:48:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "576564155991"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "413d3287-9985-4df3-900f-84be5459bef1", "record_id": "flaws_cloudtrail:0000354:413d3287-9985-4df3-900f-84be5459bef1", "row_index": 354, "timestamp": "2019-07-30T21:48:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "413d3287-9985-4df3-900f-84be5459bef1", "eventTime": "2019-07-30T21:48:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "576564155991"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "087a65f7-5e2e-4a8a-b4b7-533ba0bdf38e", "record_id": "flaws_cloudtrail:0000355:087a65f7-5e2e-4a8a-b4b7-533ba0bdf38e", "row_index": 355, "timestamp": "2019-07-30T21:48:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "087a65f7-5e2e-4a8a-b4b7-533ba0bdf38e", "eventTime": "2019-07-30T21:48:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "012748580449"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94dda275-8316-4a0f-b954-3a11d1e8ebb9", "record_id": "flaws_cloudtrail:0000356:94dda275-8316-4a0f-b954-3a11d1e8ebb9", "row_index": 356, "timestamp": "2019-07-30T21:48:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94dda275-8316-4a0f-b954-3a11d1e8ebb9", "eventTime": "2019-07-30T21:48:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "012748580449"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "087a65f7-5e2e-4a8a-b4b7-533ba0bdf38e", "record_id": "flaws_cloudtrail:0000357:087a65f7-5e2e-4a8a-b4b7-533ba0bdf38e", "row_index": 357, "timestamp": "2019-07-30T21:48:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "087a65f7-5e2e-4a8a-b4b7-533ba0bdf38e", "eventTime": "2019-07-30T21:48:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "012748580449"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94dda275-8316-4a0f-b954-3a11d1e8ebb9", "record_id": "flaws_cloudtrail:0000358:94dda275-8316-4a0f-b954-3a11d1e8ebb9", "row_index": 358, "timestamp": "2019-07-30T21:48:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94dda275-8316-4a0f-b954-3a11d1e8ebb9", "eventTime": "2019-07-30T21:48:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "012748580449"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74293c3-da0f-4f04-8dbb-88fdbb84b867", "record_id": "flaws_cloudtrail:0000359:74293c3-da0f-4f04-8dbb-88fdbb84b867", "row_index": 359, "timestamp": "2019-07-30T21:48:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74293c3-da0f-4f04-8dbb-88fdbb84b867", "eventTime": "2019-07-30T21:48:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "012748580449"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74293c3-da0f-4f04-8dbb-88fdbb84b867", "record_id": "flaws_cloudtrail:0000360:74293c3-da0f-4f04-8dbb-88fdbb84b867", "row_index": 360, "timestamp": "2019-07-30T21:48:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74293c3-da0f-4f04-8dbb-88fdbb84b867", "eventTime": "2019-07-30T21:48:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "012748580449"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f7452f7-1cad-41f7-80f2-db5951da2424", "record_id": "flaws_cloudtrail:0000361:8f7452f7-1cad-41f7-80f2-db5951da2424", "row_index": 361, "timestamp": "2019-07-30T21:48:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f7452f7-1cad-41f7-80f2-db5951da2424", "eventTime": "2019-07-30T21:48:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "012748580449"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f7452f7-1cad-41f7-80f2-db5951da2424", "record_id": "flaws_cloudtrail:0000362:8f7452f7-1cad-41f7-80f2-db5951da2424", "row_index": 362, "timestamp": "2019-07-30T21:48:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f7452f7-1cad-41f7-80f2-db5951da2424", "eventTime": "2019-07-30T21:48:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "012748580449"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bae194dc-2fae-45ba-8d23-f58638cf354", "record_id": "flaws_cloudtrail:0000363:bae194dc-2fae-45ba-8d23-f58638cf354", "row_index": 363, "timestamp": "2019-07-30T21:48:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bae194dc-2fae-45ba-8d23-f58638cf354", "eventTime": "2019-07-30T21:48:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "012748580449"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bae194dc-2fae-45ba-8d23-f58638cf354", "record_id": "flaws_cloudtrail:0000364:bae194dc-2fae-45ba-8d23-f58638cf354", "row_index": 364, "timestamp": "2019-07-30T21:48:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bae194dc-2fae-45ba-8d23-f58638cf354", "eventTime": "2019-07-30T21:48:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "012748580449"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7da50ad0-1302-4624-9a50-01bfe5e6da6a", "record_id": "flaws_cloudtrail:0000365:7da50ad0-1302-4624-9a50-01bfe5e6da6a", "row_index": 365, "timestamp": "2019-07-30T21:48:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7da50ad0-1302-4624-9a50-01bfe5e6da6a", "eventTime": "2019-07-30T21:48:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "012748580449"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7da50ad0-1302-4624-9a50-01bfe5e6da6a", "record_id": "flaws_cloudtrail:0000366:7da50ad0-1302-4624-9a50-01bfe5e6da6a", "row_index": 366, "timestamp": "2019-07-30T21:48:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7da50ad0-1302-4624-9a50-01bfe5e6da6a", "eventTime": "2019-07-30T21:48:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "012748580449"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "673232dd-7a1b-4a1a-a668-76e4325c968d", "record_id": "flaws_cloudtrail:0000367:673232dd-7a1b-4a1a-a668-76e4325c968d", "row_index": 367, "timestamp": "2019-07-30T21:48:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "673232dd-7a1b-4a1a-a668-76e4325c968d", "eventTime": "2019-07-30T21:48:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "012748580449"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "673232dd-7a1b-4a1a-a668-76e4325c968d", "record_id": "flaws_cloudtrail:0000368:673232dd-7a1b-4a1a-a668-76e4325c968d", "row_index": 368, "timestamp": "2019-07-30T21:48:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "673232dd-7a1b-4a1a-a668-76e4325c968d", "eventTime": "2019-07-30T21:48:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "012748580449"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b30da81-9c01-4b66-93db-645b83f232ac", "record_id": "flaws_cloudtrail:0000369:6b30da81-9c01-4b66-93db-645b83f232ac", "row_index": 369, "timestamp": "2019-07-30T21:48:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b30da81-9c01-4b66-93db-645b83f232ac", "eventTime": "2019-07-30T21:48:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "012748580449"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b30da81-9c01-4b66-93db-645b83f232ac", "record_id": "flaws_cloudtrail:0000370:6b30da81-9c01-4b66-93db-645b83f232ac", "row_index": 370, "timestamp": "2019-07-30T21:48:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b30da81-9c01-4b66-93db-645b83f232ac", "eventTime": "2019-07-30T21:48:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "012748580449"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4bde826-58ee-4163-b1d5-1a2d6bae503d", "record_id": "flaws_cloudtrail:0000371:c4bde826-58ee-4163-b1d5-1a2d6bae503d", "row_index": 371, "timestamp": "2019-07-30T21:48:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4bde826-58ee-4163-b1d5-1a2d6bae503d", "eventTime": "2019-07-30T21:48:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "012748580449"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4bde826-58ee-4163-b1d5-1a2d6bae503d", "record_id": "flaws_cloudtrail:0000372:c4bde826-58ee-4163-b1d5-1a2d6bae503d", "row_index": 372, "timestamp": "2019-07-30T21:48:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4bde826-58ee-4163-b1d5-1a2d6bae503d", "eventTime": "2019-07-30T21:48:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "012748580449"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c34654-a8d3-48b0-914a-98afbd94e74c", "record_id": "flaws_cloudtrail:0000373:c34654-a8d3-48b0-914a-98afbd94e74c", "row_index": 373, "timestamp": "2019-07-30T21:48:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c34654-a8d3-48b0-914a-98afbd94e74c", "eventTime": "2019-07-30T21:48:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "012748580449"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c34654-a8d3-48b0-914a-98afbd94e74c", "record_id": "flaws_cloudtrail:0000374:c34654-a8d3-48b0-914a-98afbd94e74c", "row_index": 374, "timestamp": "2019-07-30T21:48:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c34654-a8d3-48b0-914a-98afbd94e74c", "eventTime": "2019-07-30T21:48:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "012748580449"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dbcabb5d-a99e-4ef8-9ecf-8c5d6be31aea", "record_id": "flaws_cloudtrail:0000375:dbcabb5d-a99e-4ef8-9ecf-8c5d6be31aea", "row_index": 375, "timestamp": "2019-07-30T21:48:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dbcabb5d-a99e-4ef8-9ecf-8c5d6be31aea", "eventTime": "2019-07-30T21:48:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "012748580449"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dbcabb5d-a99e-4ef8-9ecf-8c5d6be31aea", "record_id": "flaws_cloudtrail:0000376:dbcabb5d-a99e-4ef8-9ecf-8c5d6be31aea", "row_index": 376, "timestamp": "2019-07-30T21:48:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dbcabb5d-a99e-4ef8-9ecf-8c5d6be31aea", "eventTime": "2019-07-30T21:48:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "012748580449"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2550e053-0f23-4e7f-9714-31ad902200d91", "record_id": "flaws_cloudtrail:0000377:2550e053-0f23-4e7f-9714-31ad902200d91", "row_index": 377, "timestamp": "2019-07-30T21:48:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2550e053-0f23-4e7f-9714-31ad902200d91", "eventTime": "2019-07-30T21:48:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "012748580449"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2550e053-0f23-4e7f-9714-31ad902200d91", "record_id": "flaws_cloudtrail:0000378:2550e053-0f23-4e7f-9714-31ad902200d91", "row_index": 378, "timestamp": "2019-07-30T21:48:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2550e053-0f23-4e7f-9714-31ad902200d91", "eventTime": "2019-07-30T21:48:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "012748580449"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f042b719-1da6-4852-a640-34558b3d7c9", "record_id": "flaws_cloudtrail:0000379:f042b719-1da6-4852-a640-34558b3d7c9", "row_index": 379, "timestamp": "2019-07-30T21:48:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f042b719-1da6-4852-a640-34558b3d7c9", "eventTime": "2019-07-30T21:48:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "012748580449"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f042b719-1da6-4852-a640-34558b3d7c9", "record_id": "flaws_cloudtrail:0000380:f042b719-1da6-4852-a640-34558b3d7c9", "row_index": 380, "timestamp": "2019-07-30T21:48:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f042b719-1da6-4852-a640-34558b3d7c9", "eventTime": "2019-07-30T21:48:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "012748580449"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1cb8cfef-acdb-496e-a9db-0e128a2dc8cf", "record_id": "flaws_cloudtrail:0000381:1cb8cfef-acdb-496e-a9db-0e128a2dc8cf", "row_index": 381, "timestamp": "2019-07-30T21:48:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1cb8cfef-acdb-496e-a9db-0e128a2dc8cf", "eventTime": "2019-07-30T21:48:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "012748580449"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1cb8cfef-acdb-496e-a9db-0e128a2dc8cf", "record_id": "flaws_cloudtrail:0000382:1cb8cfef-acdb-496e-a9db-0e128a2dc8cf", "row_index": 382, "timestamp": "2019-07-30T21:48:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1cb8cfef-acdb-496e-a9db-0e128a2dc8cf", "eventTime": "2019-07-30T21:48:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "012748580449"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1222f954-e919-4e8c-8f14-d072597ffb8ae", "record_id": "flaws_cloudtrail:0000383:1222f954-e919-4e8c-8f14-d072597ffb8ae", "row_index": 383, "timestamp": "2019-07-30T21:48:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1222f954-e919-4e8c-8f14-d072597ffb8ae", "eventTime": "2019-07-30T21:48:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "012748580449"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1222f954-e919-4e8c-8f14-d072597ffb8ae", "record_id": "flaws_cloudtrail:0000384:1222f954-e919-4e8c-8f14-d072597ffb8ae", "row_index": 384, "timestamp": "2019-07-30T21:48:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1222f954-e919-4e8c-8f14-d072597ffb8ae", "eventTime": "2019-07-30T21:48:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "012748580449"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43413ad1-1c56-4c4e-b2cb-79a86f7a7736", "record_id": "flaws_cloudtrail:0000385:43413ad1-1c56-4c4e-b2cb-79a86f7a7736", "row_index": 385, "timestamp": "2019-07-30T21:49:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43413ad1-1c56-4c4e-b2cb-79a86f7a7736", "eventTime": "2019-07-30T21:49:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "012748580449"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43413ad1-1c56-4c4e-b2cb-79a86f7a7736", "record_id": "flaws_cloudtrail:0000386:43413ad1-1c56-4c4e-b2cb-79a86f7a7736", "row_index": 386, "timestamp": "2019-07-30T21:49:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43413ad1-1c56-4c4e-b2cb-79a86f7a7736", "eventTime": "2019-07-30T21:49:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "012748580449"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7ccb8d2-c0c3-485b-ad44-e5e8b6106c9c", "record_id": "flaws_cloudtrail:0000387:b7ccb8d2-c0c3-485b-ad44-e5e8b6106c9c", "row_index": 387, "timestamp": "2019-07-30T21:49:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7ccb8d2-c0c3-485b-ad44-e5e8b6106c9c", "eventTime": "2019-07-30T21:49:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "310935111432"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8acdea2b-289e-40ff-8f25-5d406dd8d185", "record_id": "flaws_cloudtrail:0000388:8acdea2b-289e-40ff-8f25-5d406dd8d185", "row_index": 388, "timestamp": "2019-07-30T21:49:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8acdea2b-289e-40ff-8f25-5d406dd8d185", "eventTime": "2019-07-30T21:49:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "310935111432"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7ccb8d2-c0c3-485b-ad44-e5e8b6106c9c", "record_id": "flaws_cloudtrail:0000389:b7ccb8d2-c0c3-485b-ad44-e5e8b6106c9c", "row_index": 389, "timestamp": "2019-07-30T21:49:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7ccb8d2-c0c3-485b-ad44-e5e8b6106c9c", "eventTime": "2019-07-30T21:49:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "310935111432"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8acdea2b-289e-40ff-8f25-5d406dd8d185", "record_id": "flaws_cloudtrail:0000390:8acdea2b-289e-40ff-8f25-5d406dd8d185", "row_index": 390, "timestamp": "2019-07-30T21:49:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8acdea2b-289e-40ff-8f25-5d406dd8d185", "eventTime": "2019-07-30T21:49:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "310935111432"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4bf6a334-73ce-4d29-b9f5-830bf7339b80", "record_id": "flaws_cloudtrail:0000391:4bf6a334-73ce-4d29-b9f5-830bf7339b80", "row_index": 391, "timestamp": "2019-07-30T21:49:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4bf6a334-73ce-4d29-b9f5-830bf7339b80", "eventTime": "2019-07-30T21:49:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "310935111432"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4bf6a334-73ce-4d29-b9f5-830bf7339b80", "record_id": "flaws_cloudtrail:0000392:4bf6a334-73ce-4d29-b9f5-830bf7339b80", "row_index": 392, "timestamp": "2019-07-30T21:49:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4bf6a334-73ce-4d29-b9f5-830bf7339b80", "eventTime": "2019-07-30T21:49:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "310935111432"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1abdbc0-3b3d-47d0-b36c-ad159293e08f", "record_id": "flaws_cloudtrail:0000393:d1abdbc0-3b3d-47d0-b36c-ad159293e08f", "row_index": 393, "timestamp": "2019-07-30T21:49:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1abdbc0-3b3d-47d0-b36c-ad159293e08f", "eventTime": "2019-07-30T21:49:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "310935111432"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1abdbc0-3b3d-47d0-b36c-ad159293e08f", "record_id": "flaws_cloudtrail:0000394:d1abdbc0-3b3d-47d0-b36c-ad159293e08f", "row_index": 394, "timestamp": "2019-07-30T21:49:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1abdbc0-3b3d-47d0-b36c-ad159293e08f", "eventTime": "2019-07-30T21:49:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "310935111432"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ecaaa16a-b800-4091-8630-125439b", "record_id": "flaws_cloudtrail:0000395:ecaaa16a-b800-4091-8630-125439b", "row_index": 395, "timestamp": "2019-07-30T21:49:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ecaaa16a-b800-4091-8630-125439b", "eventTime": "2019-07-30T21:49:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "310935111432"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ecaaa16a-b800-4091-8630-125439b", "record_id": "flaws_cloudtrail:0000396:ecaaa16a-b800-4091-8630-125439b", "row_index": 396, "timestamp": "2019-07-30T21:49:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ecaaa16a-b800-4091-8630-125439b", "eventTime": "2019-07-30T21:49:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "310935111432"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e465f3c9-ac5c-4ef8-926b-b47e3ba40cde", "record_id": "flaws_cloudtrail:0000397:e465f3c9-ac5c-4ef8-926b-b47e3ba40cde", "row_index": 397, "timestamp": "2019-07-30T21:49:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e465f3c9-ac5c-4ef8-926b-b47e3ba40cde", "eventTime": "2019-07-30T21:49:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "310935111432"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e465f3c9-ac5c-4ef8-926b-b47e3ba40cde", "record_id": "flaws_cloudtrail:0000398:e465f3c9-ac5c-4ef8-926b-b47e3ba40cde", "row_index": 398, "timestamp": "2019-07-30T21:49:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e465f3c9-ac5c-4ef8-926b-b47e3ba40cde", "eventTime": "2019-07-30T21:49:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "310935111432"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9bcdd0e9-eeb3-4ebd-adb8-8b622bb1b764", "record_id": "flaws_cloudtrail:0000399:9bcdd0e9-eeb3-4ebd-adb8-8b622bb1b764", "row_index": 399, "timestamp": "2019-07-30T21:49:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9bcdd0e9-eeb3-4ebd-adb8-8b622bb1b764", "eventTime": "2019-07-30T21:49:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "310935111432"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9bcdd0e9-eeb3-4ebd-adb8-8b622bb1b764", "record_id": "flaws_cloudtrail:0000400:9bcdd0e9-eeb3-4ebd-adb8-8b622bb1b764", "row_index": 400, "timestamp": "2019-07-30T21:49:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9bcdd0e9-eeb3-4ebd-adb8-8b622bb1b764", "eventTime": "2019-07-30T21:49:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "310935111432"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22129-b0f1-44c0-af3d-8551d9025b33", "record_id": "flaws_cloudtrail:0000401:22129-b0f1-44c0-af3d-8551d9025b33", "row_index": 401, "timestamp": "2019-07-30T21:49:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22129-b0f1-44c0-af3d-8551d9025b33", "eventTime": "2019-07-30T21:49:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "310935111432"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22129-b0f1-44c0-af3d-8551d9025b33", "record_id": "flaws_cloudtrail:0000402:22129-b0f1-44c0-af3d-8551d9025b33", "row_index": 402, "timestamp": "2019-07-30T21:49:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22129-b0f1-44c0-af3d-8551d9025b33", "eventTime": "2019-07-30T21:49:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "310935111432"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87e4a0d6-06ff-48d5-a3e4-fcc519e01168", "record_id": "flaws_cloudtrail:0000403:87e4a0d6-06ff-48d5-a3e4-fcc519e01168", "row_index": 403, "timestamp": "2019-07-30T21:49:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87e4a0d6-06ff-48d5-a3e4-fcc519e01168", "eventTime": "2019-07-30T21:49:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "310935111432"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87e4a0d6-06ff-48d5-a3e4-fcc519e01168", "record_id": "flaws_cloudtrail:0000404:87e4a0d6-06ff-48d5-a3e4-fcc519e01168", "row_index": 404, "timestamp": "2019-07-30T21:49:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87e4a0d6-06ff-48d5-a3e4-fcc519e01168", "eventTime": "2019-07-30T21:49:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "310935111432"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf085f64-43d8-4a86-8643-186f36f8d4ee", "record_id": "flaws_cloudtrail:0000405:bf085f64-43d8-4a86-8643-186f36f8d4ee", "row_index": 405, "timestamp": "2019-07-30T21:49:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf085f64-43d8-4a86-8643-186f36f8d4ee", "eventTime": "2019-07-30T21:49:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "310935111432"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf085f64-43d8-4a86-8643-186f36f8d4ee", "record_id": "flaws_cloudtrail:0000406:bf085f64-43d8-4a86-8643-186f36f8d4ee", "row_index": 406, "timestamp": "2019-07-30T21:49:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf085f64-43d8-4a86-8643-186f36f8d4ee", "eventTime": "2019-07-30T21:49:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "310935111432"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e971ec5-5a41-44e8-a22e-6fc4012530d0", "record_id": "flaws_cloudtrail:0000407:2e971ec5-5a41-44e8-a22e-6fc4012530d0", "row_index": 407, "timestamp": "2019-07-30T21:49:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e971ec5-5a41-44e8-a22e-6fc4012530d0", "eventTime": "2019-07-30T21:49:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "310935111432"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e971ec5-5a41-44e8-a22e-6fc4012530d0", "record_id": "flaws_cloudtrail:0000408:2e971ec5-5a41-44e8-a22e-6fc4012530d0", "row_index": 408, "timestamp": "2019-07-30T21:49:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e971ec5-5a41-44e8-a22e-6fc4012530d0", "eventTime": "2019-07-30T21:49:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "310935111432"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "381d1217-7eb7-4863-992c-9cd5dbdf22bc", "record_id": "flaws_cloudtrail:0000409:381d1217-7eb7-4863-992c-9cd5dbdf22bc", "row_index": 409, "timestamp": "2019-07-30T21:49:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "381d1217-7eb7-4863-992c-9cd5dbdf22bc", "eventTime": "2019-07-30T21:49:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "310935111432"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "381d1217-7eb7-4863-992c-9cd5dbdf22bc", "record_id": "flaws_cloudtrail:0000410:381d1217-7eb7-4863-992c-9cd5dbdf22bc", "row_index": 410, "timestamp": "2019-07-30T21:49:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "381d1217-7eb7-4863-992c-9cd5dbdf22bc", "eventTime": "2019-07-30T21:49:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "310935111432"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0174de34-6f02-4ebf-854c-d1b9cb4baaa1", "record_id": "flaws_cloudtrail:0000411:0174de34-6f02-4ebf-854c-d1b9cb4baaa1", "row_index": 411, "timestamp": "2019-07-30T21:49:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0174de34-6f02-4ebf-854c-d1b9cb4baaa1", "eventTime": "2019-07-30T21:49:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "310935111432"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0174de34-6f02-4ebf-854c-d1b9cb4baaa1", "record_id": "flaws_cloudtrail:0000412:0174de34-6f02-4ebf-854c-d1b9cb4baaa1", "row_index": 412, "timestamp": "2019-07-30T21:49:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0174de34-6f02-4ebf-854c-d1b9cb4baaa1", "eventTime": "2019-07-30T21:49:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "310935111432"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cfe59f47-4e7b-4b5d-b6fc-f4e126b371a4", "record_id": "flaws_cloudtrail:0000413:cfe59f47-4e7b-4b5d-b6fc-f4e126b371a4", "row_index": 413, "timestamp": "2019-07-30T21:49:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cfe59f47-4e7b-4b5d-b6fc-f4e126b371a4", "eventTime": "2019-07-30T21:49:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "310935111432"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cfe59f47-4e7b-4b5d-b6fc-f4e126b371a4", "record_id": "flaws_cloudtrail:0000414:cfe59f47-4e7b-4b5d-b6fc-f4e126b371a4", "row_index": 414, "timestamp": "2019-07-30T21:49:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cfe59f47-4e7b-4b5d-b6fc-f4e126b371a4", "eventTime": "2019-07-30T21:49:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "310935111432"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26764d-67dd-4b6a-b5f7-a3d9aedc6025", "record_id": "flaws_cloudtrail:0000415:26764d-67dd-4b6a-b5f7-a3d9aedc6025", "row_index": 415, "timestamp": "2019-07-30T21:49:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26764d-67dd-4b6a-b5f7-a3d9aedc6025", "eventTime": "2019-07-30T21:49:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "310935111432"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26764d-67dd-4b6a-b5f7-a3d9aedc6025", "record_id": "flaws_cloudtrail:0000416:26764d-67dd-4b6a-b5f7-a3d9aedc6025", "row_index": 416, "timestamp": "2019-07-30T21:49:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26764d-67dd-4b6a-b5f7-a3d9aedc6025", "eventTime": "2019-07-30T21:49:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "310935111432"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "327a76cd-17df-4e72-b73f-826d7e138107", "record_id": "flaws_cloudtrail:0000417:327a76cd-17df-4e72-b73f-826d7e138107", "row_index": 417, "timestamp": "2019-07-30T21:49:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "327a76cd-17df-4e72-b73f-826d7e138107", "eventTime": "2019-07-30T21:49:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "310935111432"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "327a76cd-17df-4e72-b73f-826d7e138107", "record_id": "flaws_cloudtrail:0000418:327a76cd-17df-4e72-b73f-826d7e138107", "row_index": 418, "timestamp": "2019-07-30T21:49:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "327a76cd-17df-4e72-b73f-826d7e138107", "eventTime": "2019-07-30T21:49:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "310935111432"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e5251b0-d212-47d1-85b3-7cebe18af68a", "record_id": "flaws_cloudtrail:0000419:6e5251b0-d212-47d1-85b3-7cebe18af68a", "row_index": 419, "timestamp": "2019-07-30T21:49:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e5251b0-d212-47d1-85b3-7cebe18af68a", "eventTime": "2019-07-30T21:49:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "250796329496"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e5251b0-d212-47d1-85b3-7cebe18af68a", "record_id": "flaws_cloudtrail:0000420:6e5251b0-d212-47d1-85b3-7cebe18af68a", "row_index": 420, "timestamp": "2019-07-30T21:49:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e5251b0-d212-47d1-85b3-7cebe18af68a", "eventTime": "2019-07-30T21:49:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "250796329496"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "787636f6-ebc1-4a4e-8ed0-3ac1ed763f7d", "record_id": "flaws_cloudtrail:0000421:787636f6-ebc1-4a4e-8ed0-3ac1ed763f7d", "row_index": 421, "timestamp": "2019-07-30T21:49:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "787636f6-ebc1-4a4e-8ed0-3ac1ed763f7d", "eventTime": "2019-07-30T21:49:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "250796329496"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "787636f6-ebc1-4a4e-8ed0-3ac1ed763f7d", "record_id": "flaws_cloudtrail:0000422:787636f6-ebc1-4a4e-8ed0-3ac1ed763f7d", "row_index": 422, "timestamp": "2019-07-30T21:49:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "787636f6-ebc1-4a4e-8ed0-3ac1ed763f7d", "eventTime": "2019-07-30T21:49:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "250796329496"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05c020338-deb7-4073-a011-e560623ca67c6", "record_id": "flaws_cloudtrail:0000423:05c020338-deb7-4073-a011-e560623ca67c6", "row_index": 423, "timestamp": "2019-07-30T21:49:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05c020338-deb7-4073-a011-e560623ca67c6", "eventTime": "2019-07-30T21:49:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "250796329496"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05c020338-deb7-4073-a011-e560623ca67c6", "record_id": "flaws_cloudtrail:0000424:05c020338-deb7-4073-a011-e560623ca67c6", "row_index": 424, "timestamp": "2019-07-30T21:49:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05c020338-deb7-4073-a011-e560623ca67c6", "eventTime": "2019-07-30T21:49:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "250796329496"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73a4022b-948a-4b6e-a057-c607bd1d5454", "record_id": "flaws_cloudtrail:0000425:73a4022b-948a-4b6e-a057-c607bd1d5454", "row_index": 425, "timestamp": "2019-07-30T21:49:43Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "[aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73a4022b-948a-4b6e-a057-c607bd1d5454", "eventTime": "2019-07-30T21:49:43Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "[aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73a4022b-948a-4b6e-a057-c607bd1d5454", "record_id": "flaws_cloudtrail:0000426:73a4022b-948a-4b6e-a057-c607bd1d5454", "row_index": 426, "timestamp": "2019-07-30T21:49:43Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "[aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73a4022b-948a-4b6e-a057-c607bd1d5454", "eventTime": "2019-07-30T21:49:43Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "[aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e0b2f4b-cbc8-4037-83c3-e7868b8aa306", "record_id": "flaws_cloudtrail:0000427:2e0b2f4b-cbc8-4037-83c3-e7868b8aa306", "row_index": 427, "timestamp": "2019-07-30T21:52:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e0b2f4b-cbc8-4037-83c3-e7868b8aa306", "eventTime": "2019-07-30T21:52:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "729770923397"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e0b2f4b-cbc8-4037-83c3-e7868b8aa306", "record_id": "flaws_cloudtrail:0000428:2e0b2f4b-cbc8-4037-83c3-e7868b8aa306", "row_index": 428, "timestamp": "2019-07-30T21:52:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e0b2f4b-cbc8-4037-83c3-e7868b8aa306", "eventTime": "2019-07-30T21:52:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "729770923397"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92b713d3-6037-4dfb-81a8-eb27f748969c7", "record_id": "flaws_cloudtrail:0000429:92b713d3-6037-4dfb-81a8-eb27f748969c7", "row_index": 429, "timestamp": "2019-07-30T21:52:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92b713d3-6037-4dfb-81a8-eb27f748969c7", "eventTime": "2019-07-30T21:52:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "729770923397"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "097021f2d-4603-443c-8cb8-7e0969a2bbfc", "record_id": "flaws_cloudtrail:0000430:097021f2d-4603-443c-8cb8-7e0969a2bbfc", "row_index": 430, "timestamp": "2019-07-30T21:52:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "097021f2d-4603-443c-8cb8-7e0969a2bbfc", "eventTime": "2019-07-30T21:52:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "729770923397"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92b713d3-6037-4dfb-81a8-eb27f748969c7", "record_id": "flaws_cloudtrail:0000431:92b713d3-6037-4dfb-81a8-eb27f748969c7", "row_index": 431, "timestamp": "2019-07-30T21:52:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92b713d3-6037-4dfb-81a8-eb27f748969c7", "eventTime": "2019-07-30T21:52:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "729770923397"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "097021f2d-4603-443c-8cb8-7e0969a2bbfc", "record_id": "flaws_cloudtrail:0000432:097021f2d-4603-443c-8cb8-7e0969a2bbfc", "row_index": 432, "timestamp": "2019-07-30T21:52:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "097021f2d-4603-443c-8cb8-7e0969a2bbfc", "eventTime": "2019-07-30T21:52:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "729770923397"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf763e3c-579b-4cdd-899c-22d0d7cbf6ab", "record_id": "flaws_cloudtrail:0000433:cf763e3c-579b-4cdd-899c-22d0d7cbf6ab", "row_index": 433, "timestamp": "2019-07-30T21:52:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf763e3c-579b-4cdd-899c-22d0d7cbf6ab", "eventTime": "2019-07-30T21:52:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "729770923397"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf763e3c-579b-4cdd-899c-22d0d7cbf6ab", "record_id": "flaws_cloudtrail:0000434:cf763e3c-579b-4cdd-899c-22d0d7cbf6ab", "row_index": 434, "timestamp": "2019-07-30T21:52:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf763e3c-579b-4cdd-899c-22d0d7cbf6ab", "eventTime": "2019-07-30T21:52:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "729770923397"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5e8c8ef-591b-4144-980d-8e15c8b88811", "record_id": "flaws_cloudtrail:0000435:b5e8c8ef-591b-4144-980d-8e15c8b88811", "row_index": 435, "timestamp": "2019-07-30T21:52:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5e8c8ef-591b-4144-980d-8e15c8b88811", "eventTime": "2019-07-30T21:52:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "729770923397"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5e8c8ef-591b-4144-980d-8e15c8b88811", "record_id": "flaws_cloudtrail:0000436:b5e8c8ef-591b-4144-980d-8e15c8b88811", "row_index": 436, "timestamp": "2019-07-30T21:52:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5e8c8ef-591b-4144-980d-8e15c8b88811", "eventTime": "2019-07-30T21:52:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "729770923397"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e41b2458-494e-49aa-accd-843dcee4bf1f", "record_id": "flaws_cloudtrail:0000437:e41b2458-494e-49aa-accd-843dcee4bf1f", "row_index": 437, "timestamp": "2019-07-30T21:52:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e41b2458-494e-49aa-accd-843dcee4bf1f", "eventTime": "2019-07-30T21:52:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "729770923397"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e41b2458-494e-49aa-accd-843dcee4bf1f", "record_id": "flaws_cloudtrail:0000438:e41b2458-494e-49aa-accd-843dcee4bf1f", "row_index": 438, "timestamp": "2019-07-30T21:52:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e41b2458-494e-49aa-accd-843dcee4bf1f", "eventTime": "2019-07-30T21:52:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "729770923397"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b694b75-634d-49c2-8a0b-0f913ab547fb", "record_id": "flaws_cloudtrail:0000439:3b694b75-634d-49c2-8a0b-0f913ab547fb", "row_index": 439, "timestamp": "2019-07-30T21:52:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b694b75-634d-49c2-8a0b-0f913ab547fb", "eventTime": "2019-07-30T21:52:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "729770923397"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b694b75-634d-49c2-8a0b-0f913ab547fb", "record_id": "flaws_cloudtrail:0000440:3b694b75-634d-49c2-8a0b-0f913ab547fb", "row_index": 440, "timestamp": "2019-07-30T21:52:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b694b75-634d-49c2-8a0b-0f913ab547fb", "eventTime": "2019-07-30T21:52:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "729770923397"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bde4aacb-dd22-4c55-b77d-cb72e092aca7", "record_id": "flaws_cloudtrail:0000441:bde4aacb-dd22-4c55-b77d-cb72e092aca7", "row_index": 441, "timestamp": "2019-07-30T21:52:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bde4aacb-dd22-4c55-b77d-cb72e092aca7", "eventTime": "2019-07-30T21:52:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "729770923397"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bde4aacb-dd22-4c55-b77d-cb72e092aca7", "record_id": "flaws_cloudtrail:0000442:bde4aacb-dd22-4c55-b77d-cb72e092aca7", "row_index": 442, "timestamp": "2019-07-30T21:52:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bde4aacb-dd22-4c55-b77d-cb72e092aca7", "eventTime": "2019-07-30T21:52:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "729770923397"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba13674c-5f0e-4df2-8a22-b29aa1903e6d", "record_id": "flaws_cloudtrail:0000443:ba13674c-5f0e-4df2-8a22-b29aa1903e6d", "row_index": 443, "timestamp": "2019-07-30T21:52:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba13674c-5f0e-4df2-8a22-b29aa1903e6d", "eventTime": "2019-07-30T21:52:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "729770923397"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c1b691c-f8ce-489b-b355-e1e2645b18fd", "record_id": "flaws_cloudtrail:0000444:3c1b691c-f8ce-489b-b355-e1e2645b18fd", "row_index": 444, "timestamp": "2019-07-30T21:52:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c1b691c-f8ce-489b-b355-e1e2645b18fd", "eventTime": "2019-07-30T21:52:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "729770923397"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba13674c-5f0e-4df2-8a22-b29aa1903e6d", "record_id": "flaws_cloudtrail:0000445:ba13674c-5f0e-4df2-8a22-b29aa1903e6d", "row_index": 445, "timestamp": "2019-07-30T21:52:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba13674c-5f0e-4df2-8a22-b29aa1903e6d", "eventTime": "2019-07-30T21:52:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "729770923397"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c1b691c-f8ce-489b-b355-e1e2645b18fd", "record_id": "flaws_cloudtrail:0000446:3c1b691c-f8ce-489b-b355-e1e2645b18fd", "row_index": 446, "timestamp": "2019-07-30T21:52:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c1b691c-f8ce-489b-b355-e1e2645b18fd", "eventTime": "2019-07-30T21:52:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "729770923397"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b65eef13-953b-45f6-a04b-e38712c2dcb7", "record_id": "flaws_cloudtrail:0000447:b65eef13-953b-45f6-a04b-e38712c2dcb7", "row_index": 447, "timestamp": "2019-07-30T21:52:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b65eef13-953b-45f6-a04b-e38712c2dcb7", "eventTime": "2019-07-30T21:52:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "729770923397"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b65eef13-953b-45f6-a04b-e38712c2dcb7", "record_id": "flaws_cloudtrail:0000448:b65eef13-953b-45f6-a04b-e38712c2dcb7", "row_index": 448, "timestamp": "2019-07-30T21:52:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b65eef13-953b-45f6-a04b-e38712c2dcb7", "eventTime": "2019-07-30T21:52:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "729770923397"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe18fb92-463f-4e0e-9fa5-6fe605d0b308", "record_id": "flaws_cloudtrail:0000449:fe18fb92-463f-4e0e-9fa5-6fe605d0b308", "row_index": 449, "timestamp": "2019-07-30T21:52:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe18fb92-463f-4e0e-9fa5-6fe605d0b308", "eventTime": "2019-07-30T21:52:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "729770923397"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe18fb92-463f-4e0e-9fa5-6fe605d0b308", "record_id": "flaws_cloudtrail:0000450:fe18fb92-463f-4e0e-9fa5-6fe605d0b308", "row_index": 450, "timestamp": "2019-07-30T21:52:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe18fb92-463f-4e0e-9fa5-6fe605d0b308", "eventTime": "2019-07-30T21:52:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "729770923397"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b20d23d3-84a7-4b36-82ee-91efff3bb4be", "record_id": "flaws_cloudtrail:0000451:b20d23d3-84a7-4b36-82ee-91efff3bb4be", "row_index": 451, "timestamp": "2019-07-30T21:52:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b20d23d3-84a7-4b36-82ee-91efff3bb4be", "eventTime": "2019-07-30T21:52:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "729770923397"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b20d23d3-84a7-4b36-82ee-91efff3bb4be", "record_id": "flaws_cloudtrail:0000452:b20d23d3-84a7-4b36-82ee-91efff3bb4be", "row_index": 452, "timestamp": "2019-07-30T21:52:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b20d23d3-84a7-4b36-82ee-91efff3bb4be", "eventTime": "2019-07-30T21:52:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "729770923397"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e84cb74-a773-4d0e-9e9f-5da5ac6a40fb", "record_id": "flaws_cloudtrail:0000453:1e84cb74-a773-4d0e-9e9f-5da5ac6a40fb", "row_index": 453, "timestamp": "2019-07-30T21:52:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e84cb74-a773-4d0e-9e9f-5da5ac6a40fb", "eventTime": "2019-07-30T21:52:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "729770923397"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e84cb74-a773-4d0e-9e9f-5da5ac6a40fb", "record_id": "flaws_cloudtrail:0000454:1e84cb74-a773-4d0e-9e9f-5da5ac6a40fb", "row_index": 454, "timestamp": "2019-07-30T21:52:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e84cb74-a773-4d0e-9e9f-5da5ac6a40fb", "eventTime": "2019-07-30T21:52:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "729770923397"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5cd326f8-eec9-44b3-aae7-c8af23e69bbb", "record_id": "flaws_cloudtrail:0000455:5cd326f8-eec9-44b3-aae7-c8af23e69bbb", "row_index": 455, "timestamp": "2019-07-30T21:52:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5cd326f8-eec9-44b3-aae7-c8af23e69bbb", "eventTime": "2019-07-30T21:52:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "729770923397"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5cd326f8-eec9-44b3-aae7-c8af23e69bbb", "record_id": "flaws_cloudtrail:0000456:5cd326f8-eec9-44b3-aae7-c8af23e69bbb", "row_index": 456, "timestamp": "2019-07-30T21:52:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5cd326f8-eec9-44b3-aae7-c8af23e69bbb", "eventTime": "2019-07-30T21:52:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "729770923397"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "091bd84a-f72b-468e-9e74-c034964dbaac5", "record_id": "flaws_cloudtrail:0000457:091bd84a-f72b-468e-9e74-c034964dbaac5", "row_index": 457, "timestamp": "2019-07-30T21:52:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "091bd84a-f72b-468e-9e74-c034964dbaac5", "eventTime": "2019-07-30T21:52:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "869158680140"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "091bd84a-f72b-468e-9e74-c034964dbaac5", "record_id": "flaws_cloudtrail:0000458:091bd84a-f72b-468e-9e74-c034964dbaac5", "row_index": 458, "timestamp": "2019-07-30T21:52:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "091bd84a-f72b-468e-9e74-c034964dbaac5", "eventTime": "2019-07-30T21:52:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "869158680140"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c15d15f6-fc19-4886-a2a8-e865a04f0e1b", "record_id": "flaws_cloudtrail:0000459:c15d15f6-fc19-4886-a2a8-e865a04f0e1b", "row_index": 459, "timestamp": "2019-07-30T21:52:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c15d15f6-fc19-4886-a2a8-e865a04f0e1b", "eventTime": "2019-07-30T21:52:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "869158680140"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0587ec1b-5e1c-4df8-a67b-02c3d0c8a2d9", "record_id": "flaws_cloudtrail:0000460:0587ec1b-5e1c-4df8-a67b-02c3d0c8a2d9", "row_index": 460, "timestamp": "2019-07-30T21:52:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0587ec1b-5e1c-4df8-a67b-02c3d0c8a2d9", "eventTime": "2019-07-30T21:52:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "869158680140"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c15d15f6-fc19-4886-a2a8-e865a04f0e1b", "record_id": "flaws_cloudtrail:0000461:c15d15f6-fc19-4886-a2a8-e865a04f0e1b", "row_index": 461, "timestamp": "2019-07-30T21:52:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c15d15f6-fc19-4886-a2a8-e865a04f0e1b", "eventTime": "2019-07-30T21:52:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "869158680140"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0587ec1b-5e1c-4df8-a67b-02c3d0c8a2d9", "record_id": "flaws_cloudtrail:0000462:0587ec1b-5e1c-4df8-a67b-02c3d0c8a2d9", "row_index": 462, "timestamp": "2019-07-30T21:52:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0587ec1b-5e1c-4df8-a67b-02c3d0c8a2d9", "eventTime": "2019-07-30T21:52:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "869158680140"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42af2412-4fb6-4247-8c14-8e549611", "record_id": "flaws_cloudtrail:0000463:42af2412-4fb6-4247-8c14-8e549611", "row_index": 463, "timestamp": "2019-07-30T21:52:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42af2412-4fb6-4247-8c14-8e549611", "eventTime": "2019-07-30T21:52:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "869158680140"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42af2412-4fb6-4247-8c14-8e549611", "record_id": "flaws_cloudtrail:0000464:42af2412-4fb6-4247-8c14-8e549611", "row_index": 464, "timestamp": "2019-07-30T21:52:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42af2412-4fb6-4247-8c14-8e549611", "eventTime": "2019-07-30T21:52:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "869158680140"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76aac467-5204-4950-82a1-b371712ad9", "record_id": "flaws_cloudtrail:0000465:76aac467-5204-4950-82a1-b371712ad9", "row_index": 465, "timestamp": "2019-07-30T21:52:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76aac467-5204-4950-82a1-b371712ad9", "eventTime": "2019-07-30T21:52:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "869158680140"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76aac467-5204-4950-82a1-b371712ad9", "record_id": "flaws_cloudtrail:0000466:76aac467-5204-4950-82a1-b371712ad9", "row_index": 466, "timestamp": "2019-07-30T21:52:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76aac467-5204-4950-82a1-b371712ad9", "eventTime": "2019-07-30T21:52:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "869158680140"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94ab8c40-65ff-40b2-ba14-306b178f8308", "record_id": "flaws_cloudtrail:0000467:94ab8c40-65ff-40b2-ba14-306b178f8308", "row_index": 467, "timestamp": "2019-07-30T21:52:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94ab8c40-65ff-40b2-ba14-306b178f8308", "eventTime": "2019-07-30T21:52:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "869158680140"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94ab8c40-65ff-40b2-ba14-306b178f8308", "record_id": "flaws_cloudtrail:0000468:94ab8c40-65ff-40b2-ba14-306b178f8308", "row_index": 468, "timestamp": "2019-07-30T21:52:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94ab8c40-65ff-40b2-ba14-306b178f8308", "eventTime": "2019-07-30T21:52:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "869158680140"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "328fed59-d650-40f9-8f5d-8397a7ff0ccf", "record_id": "flaws_cloudtrail:0000469:328fed59-d650-40f9-8f5d-8397a7ff0ccf", "row_index": 469, "timestamp": "2019-07-30T21:52:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "328fed59-d650-40f9-8f5d-8397a7ff0ccf", "eventTime": "2019-07-30T21:52:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "869158680140"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "328fed59-d650-40f9-8f5d-8397a7ff0ccf", "record_id": "flaws_cloudtrail:0000470:328fed59-d650-40f9-8f5d-8397a7ff0ccf", "row_index": 470, "timestamp": "2019-07-30T21:52:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "328fed59-d650-40f9-8f5d-8397a7ff0ccf", "eventTime": "2019-07-30T21:52:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "869158680140"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "964331c57-c4e5-454c-9b67-b858081eef", "record_id": "flaws_cloudtrail:0000471:964331c57-c4e5-454c-9b67-b858081eef", "row_index": 471, "timestamp": "2019-07-30T21:53:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "964331c57-c4e5-454c-9b67-b858081eef", "eventTime": "2019-07-30T21:53:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "869158680140"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "964331c57-c4e5-454c-9b67-b858081eef", "record_id": "flaws_cloudtrail:0000472:964331c57-c4e5-454c-9b67-b858081eef", "row_index": 472, "timestamp": "2019-07-30T21:53:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "964331c57-c4e5-454c-9b67-b858081eef", "eventTime": "2019-07-30T21:53:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "869158680140"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d1e57ff-0dea-4bb4-951b-be7d7da1a57b", "record_id": "flaws_cloudtrail:0000473:0d1e57ff-0dea-4bb4-951b-be7d7da1a57b", "row_index": 473, "timestamp": "2019-07-30T21:53:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d1e57ff-0dea-4bb4-951b-be7d7da1a57b", "eventTime": "2019-07-30T21:53:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "250796329496"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d1e57ff-0dea-4bb4-951b-be7d7da1a57b", "record_id": "flaws_cloudtrail:0000474:0d1e57ff-0dea-4bb4-951b-be7d7da1a57b", "row_index": 474, "timestamp": "2019-07-30T21:53:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d1e57ff-0dea-4bb4-951b-be7d7da1a57b", "eventTime": "2019-07-30T21:53:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "250796329496"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39206-a4bd-46e7-a642-36aa3b5be6c0", "record_id": "flaws_cloudtrail:0000475:39206-a4bd-46e7-a642-36aa3b5be6c0", "row_index": 475, "timestamp": "2019-07-30T21:53:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39206-a4bd-46e7-a642-36aa3b5be6c0", "eventTime": "2019-07-30T21:53:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "250796329496"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39206-a4bd-46e7-a642-36aa3b5be6c0", "record_id": "flaws_cloudtrail:0000476:39206-a4bd-46e7-a642-36aa3b5be6c0", "row_index": 476, "timestamp": "2019-07-30T21:53:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39206-a4bd-46e7-a642-36aa3b5be6c0", "eventTime": "2019-07-30T21:53:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "250796329496"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f7a339f-9360-4ef4-8113-dd82e023cda9", "record_id": "flaws_cloudtrail:0000477:7f7a339f-9360-4ef4-8113-dd82e023cda9", "row_index": 477, "timestamp": "2019-07-30T21:53:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f7a339f-9360-4ef4-8113-dd82e023cda9", "eventTime": "2019-07-30T21:53:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "250796329496"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f7a339f-9360-4ef4-8113-dd82e023cda9", "record_id": "flaws_cloudtrail:0000478:7f7a339f-9360-4ef4-8113-dd82e023cda9", "row_index": 478, "timestamp": "2019-07-30T21:53:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f7a339f-9360-4ef4-8113-dd82e023cda9", "eventTime": "2019-07-30T21:53:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "250796329496"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "288e2e6c-9d24-4043-ae40-7addfb25aed1", "record_id": "flaws_cloudtrail:0000479:288e2e6c-9d24-4043-ae40-7addfb25aed1", "row_index": 479, "timestamp": "2019-07-30T21:53:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "288e2e6c-9d24-4043-ae40-7addfb25aed1", "eventTime": "2019-07-30T21:53:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "250796329496"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "288e2e6c-9d24-4043-ae40-7addfb25aed1", "record_id": "flaws_cloudtrail:0000480:288e2e6c-9d24-4043-ae40-7addfb25aed1", "row_index": 480, "timestamp": "2019-07-30T21:53:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "288e2e6c-9d24-4043-ae40-7addfb25aed1", "eventTime": "2019-07-30T21:53:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "250796329496"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "392258d76-4377-4e15-af38-547204be", "record_id": "flaws_cloudtrail:0000481:392258d76-4377-4e15-af38-547204be", "row_index": 481, "timestamp": "2019-07-30T21:53:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "392258d76-4377-4e15-af38-547204be", "eventTime": "2019-07-30T21:53:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "250796329496"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "392258d76-4377-4e15-af38-547204be", "record_id": "flaws_cloudtrail:0000482:392258d76-4377-4e15-af38-547204be", "row_index": 482, "timestamp": "2019-07-30T21:53:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "392258d76-4377-4e15-af38-547204be", "eventTime": "2019-07-30T21:53:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "250796329496"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a74572c-91af-4044-bfed-79a5e0fdf27e", "record_id": "flaws_cloudtrail:0000483:6a74572c-91af-4044-bfed-79a5e0fdf27e", "row_index": 483, "timestamp": "2019-07-30T21:53:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a74572c-91af-4044-bfed-79a5e0fdf27e", "eventTime": "2019-07-30T21:53:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "250796329496"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a74572c-91af-4044-bfed-79a5e0fdf27e", "record_id": "flaws_cloudtrail:0000484:6a74572c-91af-4044-bfed-79a5e0fdf27e", "row_index": 484, "timestamp": "2019-07-30T21:53:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a74572c-91af-4044-bfed-79a5e0fdf27e", "eventTime": "2019-07-30T21:53:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "250796329496"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75acb2c7-9d71-43dd-8997-1b4ebedffc32", "record_id": "flaws_cloudtrail:0000485:75acb2c7-9d71-43dd-8997-1b4ebedffc32", "row_index": 485, "timestamp": "2019-07-30T21:53:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75acb2c7-9d71-43dd-8997-1b4ebedffc32", "eventTime": "2019-07-30T21:53:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "250796329496"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75acb2c7-9d71-43dd-8997-1b4ebedffc32", "record_id": "flaws_cloudtrail:0000486:75acb2c7-9d71-43dd-8997-1b4ebedffc32", "row_index": 486, "timestamp": "2019-07-30T21:53:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75acb2c7-9d71-43dd-8997-1b4ebedffc32", "eventTime": "2019-07-30T21:53:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "250796329496"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bda5e011-c15d-4f34-8917-1039a91b78f2", "record_id": "flaws_cloudtrail:0000487:bda5e011-c15d-4f34-8917-1039a91b78f2", "row_index": 487, "timestamp": "2019-07-30T21:53:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bda5e011-c15d-4f34-8917-1039a91b78f2", "eventTime": "2019-07-30T21:53:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "250796329496"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bda5e011-c15d-4f34-8917-1039a91b78f2", "record_id": "flaws_cloudtrail:0000488:bda5e011-c15d-4f34-8917-1039a91b78f2", "row_index": 488, "timestamp": "2019-07-30T21:53:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bda5e011-c15d-4f34-8917-1039a91b78f2", "eventTime": "2019-07-30T21:53:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "250796329496"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "112aa949-2fb2-4f08-9990-4994e02c2040", "record_id": "flaws_cloudtrail:0000489:112aa949-2fb2-4f08-9990-4994e02c2040", "row_index": 489, "timestamp": "2019-07-30T21:53:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "112aa949-2fb2-4f08-9990-4994e02c2040", "eventTime": "2019-07-30T21:53:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "250796329496"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "112aa949-2fb2-4f08-9990-4994e02c2040", "record_id": "flaws_cloudtrail:0000490:112aa949-2fb2-4f08-9990-4994e02c2040", "row_index": 490, "timestamp": "2019-07-30T21:53:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "112aa949-2fb2-4f08-9990-4994e02c2040", "eventTime": "2019-07-30T21:53:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "250796329496"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5680e6f1-4115-4a74-9f83-2b587cdb3169", "record_id": "flaws_cloudtrail:0000491:5680e6f1-4115-4a74-9f83-2b587cdb3169", "row_index": 491, "timestamp": "2019-07-30T21:53:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5680e6f1-4115-4a74-9f83-2b587cdb3169", "eventTime": "2019-07-30T21:53:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "250796329496"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5680e6f1-4115-4a74-9f83-2b587cdb3169", "record_id": "flaws_cloudtrail:0000492:5680e6f1-4115-4a74-9f83-2b587cdb3169", "row_index": 492, "timestamp": "2019-07-30T21:53:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5680e6f1-4115-4a74-9f83-2b587cdb3169", "eventTime": "2019-07-30T21:53:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "250796329496"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80cb208f-a75f-4326-b085-0efc6d97f688", "record_id": "flaws_cloudtrail:0000493:80cb208f-a75f-4326-b085-0efc6d97f688", "row_index": 493, "timestamp": "2019-07-30T21:53:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80cb208f-a75f-4326-b085-0efc6d97f688", "eventTime": "2019-07-30T21:53:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "250796329496"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80cb208f-a75f-4326-b085-0efc6d97f688", "record_id": "flaws_cloudtrail:0000494:80cb208f-a75f-4326-b085-0efc6d97f688", "row_index": 494, "timestamp": "2019-07-30T21:53:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80cb208f-a75f-4326-b085-0efc6d97f688", "eventTime": "2019-07-30T21:53:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "250796329496"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbf0a230-dd12-4dce-aafe-c55080d6b6d7", "record_id": "flaws_cloudtrail:0000495:fbf0a230-dd12-4dce-aafe-c55080d6b6d7", "row_index": 495, "timestamp": "2019-07-30T21:53:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbf0a230-dd12-4dce-aafe-c55080d6b6d7", "eventTime": "2019-07-30T21:53:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "250796329496"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbf0a230-dd12-4dce-aafe-c55080d6b6d7", "record_id": "flaws_cloudtrail:0000496:fbf0a230-dd12-4dce-aafe-c55080d6b6d7", "row_index": 496, "timestamp": "2019-07-30T21:53:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbf0a230-dd12-4dce-aafe-c55080d6b6d7", "eventTime": "2019-07-30T21:53:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "250796329496"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ddee2d1-f08a-415f-9c08-fae6883dffd6", "record_id": "flaws_cloudtrail:0000497:5ddee2d1-f08a-415f-9c08-fae6883dffd6", "row_index": 497, "timestamp": "2019-07-30T21:53:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ddee2d1-f08a-415f-9c08-fae6883dffd6", "eventTime": "2019-07-30T21:53:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "250796329496"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ddee2d1-f08a-415f-9c08-fae6883dffd6", "record_id": "flaws_cloudtrail:0000498:5ddee2d1-f08a-415f-9c08-fae6883dffd6", "row_index": 498, "timestamp": "2019-07-30T21:53:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ddee2d1-f08a-415f-9c08-fae6883dffd6", "eventTime": "2019-07-30T21:53:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "250796329496"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b679919e-bdb4-4680-9206-9a94486facf", "record_id": "flaws_cloudtrail:0000499:b679919e-bdb4-4680-9206-9a94486facf", "row_index": 499, "timestamp": "2019-07-30T21:53:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b679919e-bdb4-4680-9206-9a94486facf", "eventTime": "2019-07-30T21:53:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "250796329496"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b679919e-bdb4-4680-9206-9a94486facf", "record_id": "flaws_cloudtrail:0000500:b679919e-bdb4-4680-9206-9a94486facf", "row_index": 500, "timestamp": "2019-07-30T21:53:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b679919e-bdb4-4680-9206-9a94486facf", "eventTime": "2019-07-30T21:53:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "250796329496"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6a96c57-06c9-445d-8c10-d547ddfd48a8", "record_id": "flaws_cloudtrail:0000501:f6a96c57-06c9-445d-8c10-d547ddfd48a8", "row_index": 501, "timestamp": "2019-07-30T21:53:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6a96c57-06c9-445d-8c10-d547ddfd48a8", "eventTime": "2019-07-30T21:53:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "250796329496"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6a96c57-06c9-445d-8c10-d547ddfd48a8", "record_id": "flaws_cloudtrail:0000502:f6a96c57-06c9-445d-8c10-d547ddfd48a8", "row_index": 502, "timestamp": "2019-07-30T21:53:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6a96c57-06c9-445d-8c10-d547ddfd48a8", "eventTime": "2019-07-30T21:53:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "250796329496"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5c650fe-43e8-4fec-9fe7-b2d3413b975c", "record_id": "flaws_cloudtrail:0000503:e5c650fe-43e8-4fec-9fe7-b2d3413b975c", "row_index": 503, "timestamp": "2019-07-30T21:53:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5c650fe-43e8-4fec-9fe7-b2d3413b975c", "eventTime": "2019-07-30T21:53:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "250796329496"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5c650fe-43e8-4fec-9fe7-b2d3413b975c", "record_id": "flaws_cloudtrail:0000504:e5c650fe-43e8-4fec-9fe7-b2d3413b975c", "row_index": 504, "timestamp": "2019-07-30T21:53:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5c650fe-43e8-4fec-9fe7-b2d3413b975c", "eventTime": "2019-07-30T21:53:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "250796329496"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "664b0d36-b538-4818-a8fa-e77bd6118295", "record_id": "flaws_cloudtrail:0000505:664b0d36-b538-4818-a8fa-e77bd6118295", "row_index": 505, "timestamp": "2019-07-30T21:53:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "664b0d36-b538-4818-a8fa-e77bd6118295", "eventTime": "2019-07-30T21:53:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "538034770152"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "664b0d36-b538-4818-a8fa-e77bd6118295", "record_id": "flaws_cloudtrail:0000506:664b0d36-b538-4818-a8fa-e77bd6118295", "row_index": 506, "timestamp": "2019-07-30T21:53:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "664b0d36-b538-4818-a8fa-e77bd6118295", "eventTime": "2019-07-30T21:53:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "538034770152"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99e05f95-a5ba-43f5-a3f2-a87bbaefa4c3", "record_id": "flaws_cloudtrail:0000507:99e05f95-a5ba-43f5-a3f2-a87bbaefa4c3", "row_index": 507, "timestamp": "2019-07-30T21:53:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99e05f95-a5ba-43f5-a3f2-a87bbaefa4c3", "eventTime": "2019-07-30T21:53:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "538034770152"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99e05f95-a5ba-43f5-a3f2-a87bbaefa4c3", "record_id": "flaws_cloudtrail:0000508:99e05f95-a5ba-43f5-a3f2-a87bbaefa4c3", "row_index": 508, "timestamp": "2019-07-30T21:53:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99e05f95-a5ba-43f5-a3f2-a87bbaefa4c3", "eventTime": "2019-07-30T21:53:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "538034770152"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e733b365-b2f9-410b-806e-89bad726c9a7", "record_id": "flaws_cloudtrail:0000509:e733b365-b2f9-410b-806e-89bad726c9a7", "row_index": 509, "timestamp": "2019-07-30T21:53:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e733b365-b2f9-410b-806e-89bad726c9a7", "eventTime": "2019-07-30T21:53:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "538034770152"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e733b365-b2f9-410b-806e-89bad726c9a7", "record_id": "flaws_cloudtrail:0000510:e733b365-b2f9-410b-806e-89bad726c9a7", "row_index": 510, "timestamp": "2019-07-30T21:53:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e733b365-b2f9-410b-806e-89bad726c9a7", "eventTime": "2019-07-30T21:53:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "538034770152"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c38c2578-5fc1-4de0-9e9d-d750a7d8a34b", "record_id": "flaws_cloudtrail:0000511:c38c2578-5fc1-4de0-9e9d-d750a7d8a34b", "row_index": 511, "timestamp": "2019-07-30T21:53:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c38c2578-5fc1-4de0-9e9d-d750a7d8a34b", "eventTime": "2019-07-30T21:53:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "538034770152"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c38c2578-5fc1-4de0-9e9d-d750a7d8a34b", "record_id": "flaws_cloudtrail:0000512:c38c2578-5fc1-4de0-9e9d-d750a7d8a34b", "row_index": 512, "timestamp": "2019-07-30T21:53:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c38c2578-5fc1-4de0-9e9d-d750a7d8a34b", "eventTime": "2019-07-30T21:53:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "538034770152"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "340e17d9-526a-480e-948e-ec38b52c6b01", "record_id": "flaws_cloudtrail:0000513:340e17d9-526a-480e-948e-ec38b52c6b01", "row_index": 513, "timestamp": "2019-07-30T21:54:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "340e17d9-526a-480e-948e-ec38b52c6b01", "eventTime": "2019-07-30T21:54:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "538034770152"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "340e17d9-526a-480e-948e-ec38b52c6b01", "record_id": "flaws_cloudtrail:0000514:340e17d9-526a-480e-948e-ec38b52c6b01", "row_index": 514, "timestamp": "2019-07-30T21:54:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "340e17d9-526a-480e-948e-ec38b52c6b01", "eventTime": "2019-07-30T21:54:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "538034770152"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d83427d5-ef4f-4595-8964-4c0faa1bfe41", "record_id": "flaws_cloudtrail:0000515:d83427d5-ef4f-4595-8964-4c0faa1bfe41", "row_index": 515, "timestamp": "2019-07-30T21:54:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d83427d5-ef4f-4595-8964-4c0faa1bfe41", "eventTime": "2019-07-30T21:54:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "538034770152"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d83427d5-ef4f-4595-8964-4c0faa1bfe41", "record_id": "flaws_cloudtrail:0000516:d83427d5-ef4f-4595-8964-4c0faa1bfe41", "row_index": 516, "timestamp": "2019-07-30T21:54:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d83427d5-ef4f-4595-8964-4c0faa1bfe41", "eventTime": "2019-07-30T21:54:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "538034770152"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d27f9e4b-84d1-4112-b2c3-a3d8825f34e9", "record_id": "flaws_cloudtrail:0000517:d27f9e4b-84d1-4112-b2c3-a3d8825f34e9", "row_index": 517, "timestamp": "2019-07-30T21:54:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d27f9e4b-84d1-4112-b2c3-a3d8825f34e9", "eventTime": "2019-07-30T21:54:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "538034770152"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d27f9e4b-84d1-4112-b2c3-a3d8825f34e9", "record_id": "flaws_cloudtrail:0000518:d27f9e4b-84d1-4112-b2c3-a3d8825f34e9", "row_index": 518, "timestamp": "2019-07-30T21:54:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d27f9e4b-84d1-4112-b2c3-a3d8825f34e9", "eventTime": "2019-07-30T21:54:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "538034770152"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d1a94e7-3f99-4083-aa46-b17f6fbf6d37", "record_id": "flaws_cloudtrail:0000519:5d1a94e7-3f99-4083-aa46-b17f6fbf6d37", "row_index": 519, "timestamp": "2019-07-30T21:54:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d1a94e7-3f99-4083-aa46-b17f6fbf6d37", "eventTime": "2019-07-30T21:54:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "538034770152"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d1a94e7-3f99-4083-aa46-b17f6fbf6d37", "record_id": "flaws_cloudtrail:0000520:5d1a94e7-3f99-4083-aa46-b17f6fbf6d37", "row_index": 520, "timestamp": "2019-07-30T21:54:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d1a94e7-3f99-4083-aa46-b17f6fbf6d37", "eventTime": "2019-07-30T21:54:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "538034770152"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "188fd18c-70b4-4ab3-b2f3-b4d3b7b593ac", "record_id": "flaws_cloudtrail:0000521:188fd18c-70b4-4ab3-b2f3-b4d3b7b593ac", "row_index": 521, "timestamp": "2019-07-30T21:54:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "188fd18c-70b4-4ab3-b2f3-b4d3b7b593ac", "eventTime": "2019-07-30T21:54:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "538034770152"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "188fd18c-70b4-4ab3-b2f3-b4d3b7b593ac", "record_id": "flaws_cloudtrail:0000522:188fd18c-70b4-4ab3-b2f3-b4d3b7b593ac", "row_index": 522, "timestamp": "2019-07-30T21:54:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "188fd18c-70b4-4ab3-b2f3-b4d3b7b593ac", "eventTime": "2019-07-30T21:54:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "538034770152"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2c83e0c-eea8-40c5-8611-6cd9adcee645", "record_id": "flaws_cloudtrail:0000523:e2c83e0c-eea8-40c5-8611-6cd9adcee645", "row_index": 523, "timestamp": "2019-07-30T21:54:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2c83e0c-eea8-40c5-8611-6cd9adcee645", "eventTime": "2019-07-30T21:54:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "538034770152"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2c83e0c-eea8-40c5-8611-6cd9adcee645", "record_id": "flaws_cloudtrail:0000524:e2c83e0c-eea8-40c5-8611-6cd9adcee645", "row_index": 524, "timestamp": "2019-07-30T21:54:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2c83e0c-eea8-40c5-8611-6cd9adcee645", "eventTime": "2019-07-30T21:54:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "538034770152"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "890096d9-be28-4670-aa9d-99c7b626be2e", "record_id": "flaws_cloudtrail:0000525:890096d9-be28-4670-aa9d-99c7b626be2e", "row_index": 525, "timestamp": "2019-07-30T21:54:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "890096d9-be28-4670-aa9d-99c7b626be2e", "eventTime": "2019-07-30T21:54:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "538034770152"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "890096d9-be28-4670-aa9d-99c7b626be2e", "record_id": "flaws_cloudtrail:0000526:890096d9-be28-4670-aa9d-99c7b626be2e", "row_index": 526, "timestamp": "2019-07-30T21:54:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "890096d9-be28-4670-aa9d-99c7b626be2e", "eventTime": "2019-07-30T21:54:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "538034770152"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b90eefb-a8e4-4c07-9b77-4ecda5ad9572", "record_id": "flaws_cloudtrail:0000527:7b90eefb-a8e4-4c07-9b77-4ecda5ad9572", "row_index": 527, "timestamp": "2019-07-30T21:54:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b90eefb-a8e4-4c07-9b77-4ecda5ad9572", "eventTime": "2019-07-30T21:54:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "538034770152"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e9226ca-7790-43c1-a019-91d2f20590fe", "record_id": "flaws_cloudtrail:0000528:1e9226ca-7790-43c1-a019-91d2f20590fe", "row_index": 528, "timestamp": "2019-07-30T21:54:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e9226ca-7790-43c1-a019-91d2f20590fe", "eventTime": "2019-07-30T21:54:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "538034770152"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b90eefb-a8e4-4c07-9b77-4ecda5ad9572", "record_id": "flaws_cloudtrail:0000529:7b90eefb-a8e4-4c07-9b77-4ecda5ad9572", "row_index": 529, "timestamp": "2019-07-30T21:54:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b90eefb-a8e4-4c07-9b77-4ecda5ad9572", "eventTime": "2019-07-30T21:54:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "538034770152"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e9226ca-7790-43c1-a019-91d2f20590fe", "record_id": "flaws_cloudtrail:0000530:1e9226ca-7790-43c1-a019-91d2f20590fe", "row_index": 530, "timestamp": "2019-07-30T21:54:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e9226ca-7790-43c1-a019-91d2f20590fe", "eventTime": "2019-07-30T21:54:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "538034770152"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f077704a-7ab3-46cf-a76b-d23b9b325d5d", "record_id": "flaws_cloudtrail:0000531:f077704a-7ab3-46cf-a76b-d23b9b325d5d", "row_index": 531, "timestamp": "2019-07-30T21:54:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f077704a-7ab3-46cf-a76b-d23b9b325d5d", "eventTime": "2019-07-30T21:54:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "538034770152"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f077704a-7ab3-46cf-a76b-d23b9b325d5d", "record_id": "flaws_cloudtrail:0000532:f077704a-7ab3-46cf-a76b-d23b9b325d5d", "row_index": 532, "timestamp": "2019-07-30T21:54:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f077704a-7ab3-46cf-a76b-d23b9b325d5d", "eventTime": "2019-07-30T21:54:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "538034770152"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5268be2e-e8a3-43f6-83c1-ef5a02c835f9", "record_id": "flaws_cloudtrail:0000533:5268be2e-e8a3-43f6-83c1-ef5a02c835f9", "row_index": 533, "timestamp": "2019-07-30T21:54:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5268be2e-e8a3-43f6-83c1-ef5a02c835f9", "eventTime": "2019-07-30T21:54:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "538034770152"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5268be2e-e8a3-43f6-83c1-ef5a02c835f9", "record_id": "flaws_cloudtrail:0000534:5268be2e-e8a3-43f6-83c1-ef5a02c835f9", "row_index": 534, "timestamp": "2019-07-30T21:54:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5268be2e-e8a3-43f6-83c1-ef5a02c835f9", "eventTime": "2019-07-30T21:54:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "538034770152"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4a297e9-9984-4480-82b3-7bfec7d67b6f", "record_id": "flaws_cloudtrail:0000535:d4a297e9-9984-4480-82b3-7bfec7d67b6f", "row_index": 535, "timestamp": "2019-07-30T21:54:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4a297e9-9984-4480-82b3-7bfec7d67b6f", "eventTime": "2019-07-30T21:54:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "538034770152"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4a297e9-9984-4480-82b3-7bfec7d67b6f", "record_id": "flaws_cloudtrail:0000536:d4a297e9-9984-4480-82b3-7bfec7d67b6f", "row_index": 536, "timestamp": "2019-07-30T21:54:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4a297e9-9984-4480-82b3-7bfec7d67b6f", "eventTime": "2019-07-30T21:54:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "538034770152"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50603fa0-50c9-4a14-bfc9-30e99f4093df", "record_id": "flaws_cloudtrail:0000537:50603fa0-50c9-4a14-bfc9-30e99f4093df", "row_index": 537, "timestamp": "2019-07-30T21:54:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50603fa0-50c9-4a14-bfc9-30e99f4093df", "eventTime": "2019-07-30T21:54:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "614119336615"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50603fa0-50c9-4a14-bfc9-30e99f4093df", "record_id": "flaws_cloudtrail:0000538:50603fa0-50c9-4a14-bfc9-30e99f4093df", "row_index": 538, "timestamp": "2019-07-30T21:54:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50603fa0-50c9-4a14-bfc9-30e99f4093df", "eventTime": "2019-07-30T21:54:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "614119336615"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8305ccb3-796d-497b-97b7-1603e68e615e", "record_id": "flaws_cloudtrail:0000539:8305ccb3-796d-497b-97b7-1603e68e615e", "row_index": 539, "timestamp": "2019-07-30T21:54:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8305ccb3-796d-497b-97b7-1603e68e615e", "eventTime": "2019-07-30T21:54:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "614119336615"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c34de377-d87f-4ba4-acef-bd0a7053004a", "record_id": "flaws_cloudtrail:0000540:c34de377-d87f-4ba4-acef-bd0a7053004a", "row_index": 540, "timestamp": "2019-07-30T21:54:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c34de377-d87f-4ba4-acef-bd0a7053004a", "eventTime": "2019-07-30T21:54:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "614119336615"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8305ccb3-796d-497b-97b7-1603e68e615e", "record_id": "flaws_cloudtrail:0000541:8305ccb3-796d-497b-97b7-1603e68e615e", "row_index": 541, "timestamp": "2019-07-30T21:54:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8305ccb3-796d-497b-97b7-1603e68e615e", "eventTime": "2019-07-30T21:54:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "614119336615"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c34de377-d87f-4ba4-acef-bd0a7053004a", "record_id": "flaws_cloudtrail:0000542:c34de377-d87f-4ba4-acef-bd0a7053004a", "row_index": 542, "timestamp": "2019-07-30T21:54:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c34de377-d87f-4ba4-acef-bd0a7053004a", "eventTime": "2019-07-30T21:54:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "614119336615"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46c50df3-518f-4f6a-9191-2b053ba458d1", "record_id": "flaws_cloudtrail:0000543:46c50df3-518f-4f6a-9191-2b053ba458d1", "row_index": 543, "timestamp": "2019-07-30T21:54:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46c50df3-518f-4f6a-9191-2b053ba458d1", "eventTime": "2019-07-30T21:54:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "614119336615"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46c50df3-518f-4f6a-9191-2b053ba458d1", "record_id": "flaws_cloudtrail:0000544:46c50df3-518f-4f6a-9191-2b053ba458d1", "row_index": 544, "timestamp": "2019-07-30T21:54:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46c50df3-518f-4f6a-9191-2b053ba458d1", "eventTime": "2019-07-30T21:54:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "614119336615"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec85d4dc-f6ed-4777-a2e2-10abd920de02", "record_id": "flaws_cloudtrail:0000545:ec85d4dc-f6ed-4777-a2e2-10abd920de02", "row_index": 545, "timestamp": "2019-07-30T21:54:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec85d4dc-f6ed-4777-a2e2-10abd920de02", "eventTime": "2019-07-30T21:54:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "614119336615"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec85d4dc-f6ed-4777-a2e2-10abd920de02", "record_id": "flaws_cloudtrail:0000546:ec85d4dc-f6ed-4777-a2e2-10abd920de02", "row_index": 546, "timestamp": "2019-07-30T21:54:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec85d4dc-f6ed-4777-a2e2-10abd920de02", "eventTime": "2019-07-30T21:54:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "614119336615"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38fcef7a-645c-4db8-8095-df1ca19b0ce8", "record_id": "flaws_cloudtrail:0000547:38fcef7a-645c-4db8-8095-df1ca19b0ce8", "row_index": 547, "timestamp": "2019-07-30T21:54:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38fcef7a-645c-4db8-8095-df1ca19b0ce8", "eventTime": "2019-07-30T21:54:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "614119336615"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38fcef7a-645c-4db8-8095-df1ca19b0ce8", "record_id": "flaws_cloudtrail:0000548:38fcef7a-645c-4db8-8095-df1ca19b0ce8", "row_index": 548, "timestamp": "2019-07-30T21:54:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38fcef7a-645c-4db8-8095-df1ca19b0ce8", "eventTime": "2019-07-30T21:54:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "614119336615"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "046fd0da-ceff-498d-a5fc-ee8e7f0f2a01", "record_id": "flaws_cloudtrail:0000549:046fd0da-ceff-498d-a5fc-ee8e7f0f2a01", "row_index": 549, "timestamp": "2019-07-30T21:54:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "046fd0da-ceff-498d-a5fc-ee8e7f0f2a01", "eventTime": "2019-07-30T21:54:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "614119336615"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "046fd0da-ceff-498d-a5fc-ee8e7f0f2a01", "record_id": "flaws_cloudtrail:0000550:046fd0da-ceff-498d-a5fc-ee8e7f0f2a01", "row_index": 550, "timestamp": "2019-07-30T21:54:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "046fd0da-ceff-498d-a5fc-ee8e7f0f2a01", "eventTime": "2019-07-30T21:54:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "614119336615"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "453aba8c-a53d-4c8e-a129-c6953d4424d8", "record_id": "flaws_cloudtrail:0000551:453aba8c-a53d-4c8e-a129-c6953d4424d8", "row_index": 551, "timestamp": "2019-07-30T21:54:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "453aba8c-a53d-4c8e-a129-c6953d4424d8", "eventTime": "2019-07-30T21:54:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "614119336615"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "453aba8c-a53d-4c8e-a129-c6953d4424d8", "record_id": "flaws_cloudtrail:0000552:453aba8c-a53d-4c8e-a129-c6953d4424d8", "row_index": 552, "timestamp": "2019-07-30T21:54:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "453aba8c-a53d-4c8e-a129-c6953d4424d8", "eventTime": "2019-07-30T21:54:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "614119336615"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca01f525-ce0a-4f4f-8735-deffce36d9a8", "record_id": "flaws_cloudtrail:0000553:ca01f525-ce0a-4f4f-8735-deffce36d9a8", "row_index": 553, "timestamp": "2019-07-30T21:54:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca01f525-ce0a-4f4f-8735-deffce36d9a8", "eventTime": "2019-07-30T21:54:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "614119336615"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca01f525-ce0a-4f4f-8735-deffce36d9a8", "record_id": "flaws_cloudtrail:0000554:ca01f525-ce0a-4f4f-8735-deffce36d9a8", "row_index": 554, "timestamp": "2019-07-30T21:54:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca01f525-ce0a-4f4f-8735-deffce36d9a8", "eventTime": "2019-07-30T21:54:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "614119336615"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc540ab6-993d-4c59-8615-25ba6d634960", "record_id": "flaws_cloudtrail:0000555:cc540ab6-993d-4c59-8615-25ba6d634960", "row_index": 555, "timestamp": "2019-07-30T21:54:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc540ab6-993d-4c59-8615-25ba6d634960", "eventTime": "2019-07-30T21:54:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "614119336615"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc540ab6-993d-4c59-8615-25ba6d634960", "record_id": "flaws_cloudtrail:0000556:cc540ab6-993d-4c59-8615-25ba6d634960", "row_index": 556, "timestamp": "2019-07-30T21:54:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc540ab6-993d-4c59-8615-25ba6d634960", "eventTime": "2019-07-30T21:54:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "614119336615"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a41e2636-af8f-4169-8852-137e8d567beb", "record_id": "flaws_cloudtrail:0000557:a41e2636-af8f-4169-8852-137e8d567beb", "row_index": 557, "timestamp": "2019-07-30T21:54:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a41e2636-af8f-4169-8852-137e8d567beb", "eventTime": "2019-07-30T21:54:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "614119336615"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a41e2636-af8f-4169-8852-137e8d567beb", "record_id": "flaws_cloudtrail:0000558:a41e2636-af8f-4169-8852-137e8d567beb", "row_index": 558, "timestamp": "2019-07-30T21:54:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a41e2636-af8f-4169-8852-137e8d567beb", "eventTime": "2019-07-30T21:54:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "614119336615"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fcc420c-f9c9-4728-8b4e-3410501eb374", "record_id": "flaws_cloudtrail:0000559:1fcc420c-f9c9-4728-8b4e-3410501eb374", "row_index": 559, "timestamp": "2019-07-30T21:54:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fcc420c-f9c9-4728-8b4e-3410501eb374", "eventTime": "2019-07-30T21:54:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "614119336615"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fcc420c-f9c9-4728-8b4e-3410501eb374", "record_id": "flaws_cloudtrail:0000560:1fcc420c-f9c9-4728-8b4e-3410501eb374", "row_index": 560, "timestamp": "2019-07-30T21:54:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fcc420c-f9c9-4728-8b4e-3410501eb374", "eventTime": "2019-07-30T21:54:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "614119336615"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b89f8c6b-e6f1-4ada-b4c5-6f999c30e766", "record_id": "flaws_cloudtrail:0000561:b89f8c6b-e6f1-4ada-b4c5-6f999c30e766", "row_index": 561, "timestamp": "2019-07-30T21:54:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b89f8c6b-e6f1-4ada-b4c5-6f999c30e766", "eventTime": "2019-07-30T21:54:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "614119336615"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b89f8c6b-e6f1-4ada-b4c5-6f999c30e766", "record_id": "flaws_cloudtrail:0000562:b89f8c6b-e6f1-4ada-b4c5-6f999c30e766", "row_index": 562, "timestamp": "2019-07-30T21:54:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b89f8c6b-e6f1-4ada-b4c5-6f999c30e766", "eventTime": "2019-07-30T21:54:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "614119336615"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62dacfb2-6806-47e6-a138-3ffc3a63a526", "record_id": "flaws_cloudtrail:0000563:62dacfb2-6806-47e6-a138-3ffc3a63a526", "row_index": 563, "timestamp": "2019-07-30T21:54:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62dacfb2-6806-47e6-a138-3ffc3a63a526", "eventTime": "2019-07-30T21:54:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "614119336615"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62dacfb2-6806-47e6-a138-3ffc3a63a526", "record_id": "flaws_cloudtrail:0000564:62dacfb2-6806-47e6-a138-3ffc3a63a526", "row_index": 564, "timestamp": "2019-07-30T21:54:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62dacfb2-6806-47e6-a138-3ffc3a63a526", "eventTime": "2019-07-30T21:54:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "614119336615"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68d0f352-7951-4a58-9765-9e6fc97eb2d8", "record_id": "flaws_cloudtrail:0000565:68d0f352-7951-4a58-9765-9e6fc97eb2d8", "row_index": 565, "timestamp": "2019-07-30T21:54:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68d0f352-7951-4a58-9765-9e6fc97eb2d8", "eventTime": "2019-07-30T21:54:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "614119336615"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68d0f352-7951-4a58-9765-9e6fc97eb2d8", "record_id": "flaws_cloudtrail:0000566:68d0f352-7951-4a58-9765-9e6fc97eb2d8", "row_index": 566, "timestamp": "2019-07-30T21:54:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68d0f352-7951-4a58-9765-9e6fc97eb2d8", "eventTime": "2019-07-30T21:54:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "614119336615"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c7e39a5-984b-4fab-a9dc-734219bc6148", "record_id": "flaws_cloudtrail:0000567:6c7e39a5-984b-4fab-a9dc-734219bc6148", "row_index": 567, "timestamp": "2019-07-30T21:54:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c7e39a5-984b-4fab-a9dc-734219bc6148", "eventTime": "2019-07-30T21:54:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "614119336615"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c7e39a5-984b-4fab-a9dc-734219bc6148", "record_id": "flaws_cloudtrail:0000568:6c7e39a5-984b-4fab-a9dc-734219bc6148", "row_index": 568, "timestamp": "2019-07-30T21:54:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c7e39a5-984b-4fab-a9dc-734219bc6148", "eventTime": "2019-07-30T21:54:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "614119336615"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e425d1b-189b-4991-82fd-a00035db577a", "record_id": "flaws_cloudtrail:0000569:7e425d1b-189b-4991-82fd-a00035db577a", "row_index": 569, "timestamp": "2019-07-30T21:58:53Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA33ZSCNQVPA2YKRZY", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "24.183.73.68", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 533, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e425d1b-189b-4991-82fd-a00035db577a", "eventTime": "2019-07-30T21:58:53Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "24.183.73.68", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA33ZSCNQVPA2YKRZY", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20176360-3985-4667-88d6-1eaece693e37", "record_id": "flaws_cloudtrail:0000570:20176360-3985-4667-88d6-1eaece693e37", "row_index": 570, "timestamp": "2019-07-30T21:59:28Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA33ZSCNQVPA2YKRZY", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "24.183.73.68", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 562, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20176360-3985-4667-88d6-1eaece693e37", "eventTime": "2019-07-30T21:59:28Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "24.183.73.68", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA33ZSCNQVPA2YKRZY", "userName": "backup"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0032f378-b89c-48b4-b1f8-d5f23e4e9a99", "record_id": "flaws_cloudtrail:0000571:0032f378-b89c-48b4-b1f8-d5f23e4e9a99", "row_index": 571, "timestamp": "2019-07-30T22:00:43Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA33ZSCNQVPA2YKRZY", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "24.183.73.68", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 562, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0032f378-b89c-48b4-b1f8-d5f23e4e9a99", "eventTime": "2019-07-30T22:00:43Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "24.183.73.68", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA33ZSCNQVPA2YKRZY", "userName": "backup"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59979550-930f-407a-af0c-eb335a27ff78", "record_id": "flaws_cloudtrail:0000572:59979550-930f-407a-af0c-eb335a27ff78", "row_index": 572, "timestamp": "2019-07-30T22:01:28Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA33ZSCNQVPA2YKRZY", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "24.183.73.68", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 565, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59979550-930f-407a-af0c-eb335a27ff78", "eventTime": "2019-07-30T22:01:28Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "24.183.73.68", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA33ZSCNQVPA2YKRZY", "userName": "backup"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e020f27-730b-4555-ab33-171c6d67b4bc", "record_id": "flaws_cloudtrail:0000573:0e020f27-730b-4555-ab33-171c6d67b4bc", "row_index": 573, "timestamp": "2019-07-30T22:02:30Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA33ZSCNQVPA2YKRZY", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "24.183.73.68", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 563, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e020f27-730b-4555-ab33-171c6d67b4bc", "eventTime": "2019-07-30T22:02:30Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "24.183.73.68", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA33ZSCNQVPA2YKRZY", "userName": "backup"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1a773e4-ce68-47c7-b407-db85c9a37301", "record_id": "flaws_cloudtrail:0000574:a1a773e4-ce68-47c7-b407-db85c9a37301", "row_index": 574, "timestamp": "2019-07-30T22:03:55Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA33ZSCNQVPA2YKRZY", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "24.183.73.68", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 533, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1a773e4-ce68-47c7-b407-db85c9a37301", "eventTime": "2019-07-30T22:03:55Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "24.183.73.68", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA33ZSCNQVPA2YKRZY", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe0ba5c9-05cc-4226-a111-dffb4ab2a25d", "record_id": "flaws_cloudtrail:0000575:fe0ba5c9-05cc-4226-a111-dffb4ab2a25d", "row_index": 575, "timestamp": "2019-07-30T22:04:21Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIA9FHQ9XE3CGNOZUUB", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "251.178.69.1", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1029, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe0ba5c9-05cc-4226-a111-dffb4ab2a25d", "eventTime": "2019-07-30T22:04:21Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.178.69.1", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIA9FHQ9XE3CGNOZUUB", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T21:27:31Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/07/30/[$LATEST]1280c375205c9829a395ce6dde82d6da"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b62ceac-eaa8-45e6-b57a-41e17277877e", "record_id": "flaws_cloudtrail:0000576:6b62ceac-eaa8-45e6-b57a-41e17277877e", "row_index": 576, "timestamp": "2019-07-30T22:04:21Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1619, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b62ceac-eaa8-45e6-b57a-41e17277877e", "eventTime": "2019-07-30T22:04:21Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAQSBMF7UGHD5U7I6U", "expiration": "Jul 31, 2019 10:04:21 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe0ba5c9-05cc-4226-a111-dffb4ab2a25d", "record_id": "flaws_cloudtrail:0000577:fe0ba5c9-05cc-4226-a111-dffb4ab2a25d", "row_index": 577, "timestamp": "2019-07-30T22:04:21Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIA9FHQ9XE3CGNOZUUB", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "251.178.69.1", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1029, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe0ba5c9-05cc-4226-a111-dffb4ab2a25d", "eventTime": "2019-07-30T22:04:21Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.178.69.1", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIA9FHQ9XE3CGNOZUUB", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T21:27:31Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/07/30/[$LATEST]1280c375205c9829a395ce6dde82d6da"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b62ceac-eaa8-45e6-b57a-41e17277877e", "record_id": "flaws_cloudtrail:0000578:6b62ceac-eaa8-45e6-b57a-41e17277877e", "row_index": 578, "timestamp": "2019-07-30T22:04:21Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1619, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b62ceac-eaa8-45e6-b57a-41e17277877e", "eventTime": "2019-07-30T22:04:21Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAQSBMF7UGHD5U7I6U", "expiration": "Jul 31, 2019 10:04:21 AM", "sessionToken": "AgoJb3JpZ2luX2VjEB4aCXVzLXdlc3QtMiJHMEUCIQCzVbx1hw7NSnTmLEPS2zq1vu5iAjt4FM7JjOGnfojX/wIgZN2GY3EYgHdZ9H1vKvPDUdOJhFr+lbARGX9Grh2V4NAqiwIIl///////////ARAAGgw5NzU0MjYyNjIwMjkiDH03buPp2K2x9lsZASrfAQPHCDCQo3e3QJ86ksaiB21sMH2//UAjWYEuuPl2n8PExnRS6xEhCR+S2veF+NiB8cVwQxOs4hBTZavwUN5EiiFXRZ9u/BJ0x83Qlf9rhvXgVwZDSLzOeRkFqZ1TxPNeDxrWsGDeqJ/iVVoh7WdsX/Z9A6KYFpN/imkqc8N//NVL5epJIxOifXi8zSyI8wKxcyENx+Oe5MCIqDTdbNLgtod93Sy91w8OjiJVJSbO857I0PoOnebLUQmn88xJVYwO8D/p8tZ1SofFP/TdiS37SwC+Jl1h+G3FHx2Rkki938Aw5f2C6gU6tAEeJYkIr4/Ynz/tsT2ormJw5x4WbF/FEfgQI5gUhqmR1ZXDY1Q5Zs6yZyTuNm4bLWvEY7B6OcpUW/ilq7WshMWo1JAUUyxVh3/478/bh/o3ataRZMgyV4ekP4fsviI7P+Qwb0q7tGk6ZINSDK8/wQHzWJk2t/JmGXP/0g5ghd6MY732ejhizDk9kJm8gxtc3OGX/14FPgu4o1MJ3v4ijgI5LWaJzyoL3EOkFcQ5br8DQGod3oE="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29b5e6d1-7a63-47ee-b16b-74579969756e", "record_id": "flaws_cloudtrail:0000579:29b5e6d1-7a63-47ee-b16b-74579969756e", "row_index": 579, "timestamp": "2019-07-30T22:04:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29b5e6d1-7a63-47ee-b16b-74579969756e", "eventTime": "2019-07-30T22:04:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29b5e6d1-7a63-47ee-b16b-74579969756e", "record_id": "flaws_cloudtrail:0000580:29b5e6d1-7a63-47ee-b16b-74579969756e", "row_index": 580, "timestamp": "2019-07-30T22:04:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29b5e6d1-7a63-47ee-b16b-74579969756e", "eventTime": "2019-07-30T22:04:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4379188b-95bd-4f57-9b73-241c3fbfd335", "record_id": "flaws_cloudtrail:0000581:4379188b-95bd-4f57-9b73-241c3fbfd335", "row_index": 581, "timestamp": "2019-07-30T22:05:30Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA33ZSCNQVPA2YKRZY", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "24.183.73.68", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 528, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4379188b-95bd-4f57-9b73-241c3fbfd335", "eventTime": "2019-07-30T22:05:30Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "24.183.73.68", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA33ZSCNQVPA2YKRZY", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a90534ae-d0be-4311-a737-82efe46417e9", "record_id": "flaws_cloudtrail:0000582:a90534ae-d0be-4311-a737-82efe46417e9", "row_index": 582, "timestamp": "2019-07-30T22:06:08Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA33ZSCNQVPA2YKRZY", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "24.183.73.68", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 538, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a90534ae-d0be-4311-a737-82efe46417e9", "eventTime": "2019-07-30T22:06:08Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "24.183.73.68", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA33ZSCNQVPA2YKRZY", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5682fa3-43cf-48b2-bc2a-6fe69b674632", "record_id": "flaws_cloudtrail:0000583:c5682fa3-43cf-48b2-bc2a-6fe69b674632", "row_index": 583, "timestamp": "2019-07-30T22:07:08Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA33ZSCNQVPA2YKRZY", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "24.183.73.68", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 532, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5682fa3-43cf-48b2-bc2a-6fe69b674632", "eventTime": "2019-07-30T22:07:08Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "24.183.73.68", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA33ZSCNQVPA2YKRZY", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41616a21-71ca-4434-8d95-8d341b6576ef", "record_id": "flaws_cloudtrail:0000584:41616a21-71ca-4434-8d95-8d341b6576ef", "row_index": 584, "timestamp": "2019-07-30T22:08:46Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA33ZSCNQVPA2YKRZY", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "24.183.73.68", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 526, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41616a21-71ca-4434-8d95-8d341b6576ef", "eventTime": "2019-07-30T22:08:46Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "24.183.73.68", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA33ZSCNQVPA2YKRZY", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7b0ad58-41ca-4c99-8f79-2b9d1c95eb0e", "record_id": "flaws_cloudtrail:0000585:b7b0ad58-41ca-4c99-8f79-2b9d1c95eb0e", "row_index": 585, "timestamp": "2019-07-30T22:09:49Z", "event_type": "ListFunctions", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA33ZSCNQVPA2YKRZY", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "24.183.73.68", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 532, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7b0ad58-41ca-4c99-8f79-2b9d1c95eb0e", "eventTime": "2019-07-30T22:09:49Z", "eventName": "ListFunctions", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "24.183.73.68", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA33ZSCNQVPA2YKRZY", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "892b8f6e-eea0-4663-9c7b-1042befe1e81", "record_id": "flaws_cloudtrail:0000586:892b8f6e-eea0-4663-9c7b-1042befe1e81", "row_index": 586, "timestamp": "2019-07-30T22:11:40Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA33ZSCNQVPA2YKRZY", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "24.183.73.68", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 535, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "892b8f6e-eea0-4663-9c7b-1042befe1e81", "eventTime": "2019-07-30T22:11:40Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "24.183.73.68", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA33ZSCNQVPA2YKRZY", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a901752a5-7993-4083-bc73-9e9be9cf72d0", "record_id": "flaws_cloudtrail:0000587:a901752a5-7993-4083-bc73-9e9be9cf72d0", "row_index": 587, "timestamp": "2019-07-30T22:20:41Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1617, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a901752a5-7993-4083-bc73-9e9be9cf72d0", "eventTime": "2019-07-30T22:20:41Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIA5DKOW32IUDSN0QEQ", "expiration": "Jul 31, 2019 10:20:41 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33926-9525-426c-a183-2b2bef9c8005", "record_id": "flaws_cloudtrail:0000588:33926-9525-426c-a183-2b2bef9c8005", "row_index": 588, "timestamp": "2019-07-30T22:20:41Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIA9FHQ9XE3CGNOZUUB", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "251.4.5.254", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1025, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33926-9525-426c-a183-2b2bef9c8005", "eventTime": "2019-07-30T22:20:41Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.4.5.254", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIA9FHQ9XE3CGNOZUUB", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T21:27:31Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/07/30/[$LATEST]e57a5debcb72a853c6ddd0190c4eb6d6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a901752a5-7993-4083-bc73-9e9be9cf72d0", "record_id": "flaws_cloudtrail:0000589:a901752a5-7993-4083-bc73-9e9be9cf72d0", "row_index": 589, "timestamp": "2019-07-30T22:20:41Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1617, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a901752a5-7993-4083-bc73-9e9be9cf72d0", "eventTime": "2019-07-30T22:20:41Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIA5DKOW32IUDSN0QEQ", "expiration": "Jul 31, 2019 10:20:41 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33926-9525-426c-a183-2b2bef9c8005", "record_id": "flaws_cloudtrail:0000590:33926-9525-426c-a183-2b2bef9c8005", "row_index": 590, "timestamp": "2019-07-30T22:20:41Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIA9FHQ9XE3CGNOZUUB", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "251.4.5.254", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1025, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33926-9525-426c-a183-2b2bef9c8005", "eventTime": "2019-07-30T22:20:41Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "251.4.5.254", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIA9FHQ9XE3CGNOZUUB", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T21:27:31Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/07/30/[$LATEST]e57a5debcb72a853c6ddd0190c4eb6d6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31e15ee9-16bc-4c16-b084-aeee8506ef4e", "record_id": "flaws_cloudtrail:0000591:31e15ee9-16bc-4c16-b084-aeee8506ef4e", "row_index": 591, "timestamp": "2019-07-30T22:21:03Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAZ5G5SV84ZOZDWV7N", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "181.69.236.253", "user_agent": "[aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1172, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31e15ee9-16bc-4c16-b084-aeee8506ef4e", "eventTime": "2019-07-30T22:21:03Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "[aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAZ5G5SV84ZOZDWV7N", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T21:31:36Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31e15ee9-16bc-4c16-b084-aeee8506ef4e", "record_id": "flaws_cloudtrail:0000592:31e15ee9-16bc-4c16-b084-aeee8506ef4e", "row_index": 592, "timestamp": "2019-07-30T22:21:03Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAZ5G5SV84ZOZDWV7N", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "181.69.236.253", "user_agent": "[aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1172, "raw_record_depth": 4, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31e15ee9-16bc-4c16-b084-aeee8506ef4e", "eventTime": "2019-07-30T22:21:03Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "[aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAZ5G5SV84ZOZDWV7N", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T21:31:36Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c32b262-3e57-45a8-aecd-aed4364c0e42", "record_id": "flaws_cloudtrail:0000593:7c32b262-3e57-45a8-aecd-aed4364c0e42", "row_index": 593, "timestamp": "2019-07-30T22:21:11Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "[aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c32b262-3e57-45a8-aecd-aed4364c0e42", "eventTime": "2019-07-30T22:21:11Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "[aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c32b262-3e57-45a8-aecd-aed4364c0e42", "record_id": "flaws_cloudtrail:0000594:7c32b262-3e57-45a8-aecd-aed4364c0e42", "row_index": 594, "timestamp": "2019-07-30T22:21:11Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "[aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c32b262-3e57-45a8-aecd-aed4364c0e42", "eventTime": "2019-07-30T22:21:11Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "[aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5aa10b10-52c2-4798-8aa4-5d6b172b4fc9", "record_id": "flaws_cloudtrail:0000595:5aa10b10-52c2-4798-8aa4-5d6b172b4fc9", "row_index": 595, "timestamp": "2019-07-30T22:24:39Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5aa10b10-52c2-4798-8aa4-5d6b172b4fc9", "eventTime": "2019-07-30T22:24:39Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5aa10b10-52c2-4798-8aa4-5d6b172b4fc9", "record_id": "flaws_cloudtrail:0000596:5aa10b10-52c2-4798-8aa4-5d6b172b4fc9", "row_index": 596, "timestamp": "2019-07-30T22:24:39Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5aa10b10-52c2-4798-8aa4-5d6b172b4fc9", "eventTime": "2019-07-30T22:24:39Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3092eaea-508d-48bc-b7e0-ca3503f55ed5", "record_id": "flaws_cloudtrail:0000597:3092eaea-508d-48bc-b7e0-ca3503f55ed5", "row_index": 597, "timestamp": "2019-07-30T22:24:55Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "[aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3092eaea-508d-48bc-b7e0-ca3503f55ed5", "eventTime": "2019-07-30T22:24:55Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "[aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3092eaea-508d-48bc-b7e0-ca3503f55ed5", "record_id": "flaws_cloudtrail:0000598:3092eaea-508d-48bc-b7e0-ca3503f55ed5", "row_index": 598, "timestamp": "2019-07-30T22:24:55Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "[aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3092eaea-508d-48bc-b7e0-ca3503f55ed5", "eventTime": "2019-07-30T22:24:55Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "[aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07c172b7-78d5-47dc-88d8-84de994a54a4", "record_id": "flaws_cloudtrail:0000599:07c172b7-78d5-47dc-88d8-84de994a54a4", "row_index": 599, "timestamp": "2019-07-30T22:25:17Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07c172b7-78d5-47dc-88d8-84de994a54a4", "eventTime": "2019-07-30T22:25:17Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07c172b7-78d5-47dc-88d8-84de994a54a4", "record_id": "flaws_cloudtrail:0000600:07c172b7-78d5-47dc-88d8-84de994a54a4", "row_index": 600, "timestamp": "2019-07-30T22:25:17Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07c172b7-78d5-47dc-88d8-84de994a54a4", "eventTime": "2019-07-30T22:25:17Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86ca22b7-bc34-438c-a360-0bc6a9f1aa17", "record_id": "flaws_cloudtrail:0000601:86ca22b7-bc34-438c-a360-0bc6a9f1aa17", "row_index": 601, "timestamp": "2019-07-30T22:25:36Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86ca22b7-bc34-438c-a360-0bc6a9f1aa17", "eventTime": "2019-07-30T22:25:36Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86ca22b7-bc34-438c-a360-0bc6a9f1aa17", "record_id": "flaws_cloudtrail:0000602:86ca22b7-bc34-438c-a360-0bc6a9f1aa17", "row_index": 602, "timestamp": "2019-07-30T22:25:36Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86ca22b7-bc34-438c-a360-0bc6a9f1aa17", "eventTime": "2019-07-30T22:25:36Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1affa83c-84a8-489f-8543-dd2bd4fca11b", "record_id": "flaws_cloudtrail:0000603:1affa83c-84a8-489f-8543-dd2bd4fca11b", "row_index": 603, "timestamp": "2019-07-30T22:26:23Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 746, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1affa83c-84a8-489f-8543-dd2bd4fca11b", "eventTime": "2019-07-30T22:26:23Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1affa83c-84a8-489f-8543-dd2bd4fca11b", "record_id": "flaws_cloudtrail:0000604:1affa83c-84a8-489f-8543-dd2bd4fca11b", "row_index": 604, "timestamp": "2019-07-30T22:26:23Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 746, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1affa83c-84a8-489f-8543-dd2bd4fca11b", "eventTime": "2019-07-30T22:26:23Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16f9295e-003a-4cfb-9561-a29834b5", "record_id": "flaws_cloudtrail:0000605:16f9295e-003a-4cfb-9561-a29834b5", "row_index": 605, "timestamp": "2019-07-30T22:26:51Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16f9295e-003a-4cfb-9561-a29834b5", "eventTime": "2019-07-30T22:26:51Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16f9295e-003a-4cfb-9561-a29834b5", "record_id": "flaws_cloudtrail:0000606:16f9295e-003a-4cfb-9561-a29834b5", "row_index": 606, "timestamp": "2019-07-30T22:26:51Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16f9295e-003a-4cfb-9561-a29834b5", "eventTime": "2019-07-30T22:26:51Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00de2a1f-a384-45e7-8d8a-5b4d843264d5", "record_id": "flaws_cloudtrail:0000607:00de2a1f-a384-45e7-8d8a-5b4d843264d5", "row_index": 607, "timestamp": "2019-07-30T22:27:23Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAXOGQY8FRUE9GXYCA", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "105.63.253.234", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1031, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00de2a1f-a384-45e7-8d8a-5b4d843264d5", "eventTime": "2019-07-30T22:27:23Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "105.63.253.234", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAXOGQY8FRUE9GXYCA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T22:27:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/07/30/[$LATEST]9043e51240f37508ffa4703e3c4e93f8"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d8bf965-475d-4d4b-99b8-09cbdbc4548e", "record_id": "flaws_cloudtrail:0000608:9d8bf965-475d-4d4b-99b8-09cbdbc4548e", "row_index": 608, "timestamp": "2019-07-30T22:27:23Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1620, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d8bf965-475d-4d4b-99b8-09cbdbc4548e", "eventTime": "2019-07-30T22:27:23Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAXOGQY8FRUE9GXYCA", "expiration": "Jul 31, 2019 10:27:23 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00de2a1f-a384-45e7-8d8a-5b4d843264d5", "record_id": "flaws_cloudtrail:0000609:00de2a1f-a384-45e7-8d8a-5b4d843264d5", "row_index": 609, "timestamp": "2019-07-30T22:27:23Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAXOGQY8FRUE9GXYCA", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "105.63.253.234", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1031, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00de2a1f-a384-45e7-8d8a-5b4d843264d5", "eventTime": "2019-07-30T22:27:23Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "105.63.253.234", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAXOGQY8FRUE9GXYCA", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-30T22:27:23Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/07/30/[$LATEST]9043e51240f37508ffa4703e3c4e93f8"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d8bf965-475d-4d4b-99b8-09cbdbc4548e", "record_id": "flaws_cloudtrail:0000610:9d8bf965-475d-4d4b-99b8-09cbdbc4548e", "row_index": 610, "timestamp": "2019-07-30T22:27:23Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1620, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d8bf965-475d-4d4b-99b8-09cbdbc4548e", "eventTime": "2019-07-30T22:27:23Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAXOGQY8FRUE9GXYCA", "expiration": "Jul 31, 2019 10:27:23 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd6dc11d-b4c5-4493-8526-64094a8d7b93", "record_id": "flaws_cloudtrail:0000611:dd6dc11d-b4c5-4493-8526-64094a8d7b93", "row_index": 611, "timestamp": "2019-07-30T22:27:38Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "181.69.236.253", "user_agent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd6dc11d-b4c5-4493-8526-64094a8d7b93", "eventTime": "2019-07-30T22:27:38Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "181.69.236.253", "userAgent": "aws-cli/1.16.102 Python/2.7.16 Linux/4.14.133-113.105.amzn2.x86_64 botocore/1.12.92", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}