Task: attack_reconstruction (flaws_cloudtrail)
Prompt: An IAM principal appears to confirm who they are, survey the account’s audit-trail configuration, and then take action to reduce CloudTrail visibility. Identify the responsible principal, the applicable MITRE ATT&CK technique, the supporting CloudTrail record_ids for each phase of the chain, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab398117-e902-40cd-bec1-5314ccbc0d86", "record_id": "flaws_cloudtrail:0000000:ab398117-e902-40cd-bec1-5314ccbc0d86", "row_index": 0, "timestamp": "2018-08-05T17:08:21Z", "event_type": "DescribeRepositories", "event_source": "ecr.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 990, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab398117-e902-40cd-bec1-5314ccbc0d86", "eventTime": "2018-08-05T17:08:21Z", "eventName": "DescribeRepositories", "eventSource": "ecr.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2811cbd3-c1ab-4604-85ab-ba5fbc8cdbf6", "record_id": "flaws_cloudtrail:0000001:2811cbd3-c1ab-4604-85ab-ba5fbc8cdbf6", "row_index": 1, "timestamp": "2018-08-05T17:08:22Z", "event_type": "DescribeRepositories", "event_source": "ecr.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 994, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2811cbd3-c1ab-4604-85ab-ba5fbc8cdbf6", "eventTime": "2018-08-05T17:08:22Z", "eventName": "DescribeRepositories", "eventSource": "ecr.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95216c7-6017-4b16-8159-60f7a98bd65b", "record_id": "flaws_cloudtrail:0000002:95216c7-6017-4b16-8159-60f7a98bd65b", "row_index": 2, "timestamp": "2018-08-05T17:08:23Z", "event_type": "DescribeRepositories", "event_source": "ecr.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 993, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95216c7-6017-4b16-8159-60f7a98bd65b", "eventTime": "2018-08-05T17:08:23Z", "eventName": "DescribeRepositories", "eventSource": "ecr.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd6b80ba-b854-4404-a434-0beb2374a975", "record_id": "flaws_cloudtrail:0000003:dd6b80ba-b854-4404-a434-0beb2374a975", "row_index": 3, "timestamp": "2018-08-05T17:08:24Z", "event_type": "DescribeRepositories", "event_source": "ecr.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 995, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd6b80ba-b854-4404-a434-0beb2374a975", "eventTime": "2018-08-05T17:08:24Z", "eventName": "DescribeRepositories", "eventSource": "ecr.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43dc6591-375c-40a3-b13a-387901e71b05", "record_id": "flaws_cloudtrail:0000004:43dc6591-375c-40a3-b13a-387901e71b05", "row_index": 4, "timestamp": "2018-08-05T17:08:25Z", "event_type": "DescribeRepositories", "event_source": "ecr.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 993, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43dc6591-375c-40a3-b13a-387901e71b05", "eventTime": "2018-08-05T17:08:25Z", "eventName": "DescribeRepositories", "eventSource": "ecr.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f53d5c7f-9a42-4a6e-8f9c-4db3ae7d22cc", "record_id": "flaws_cloudtrail:0000005:f53d5c7f-9a42-4a6e-8f9c-4db3ae7d22cc", "row_index": 5, "timestamp": "2018-08-05T17:08:26Z", "event_type": "DescribeRepositories", "event_source": "ecr.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 990, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f53d5c7f-9a42-4a6e-8f9c-4db3ae7d22cc", "eventTime": "2018-08-05T17:08:26Z", "eventName": "DescribeRepositories", "eventSource": "ecr.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad1a4f1f-49fe-4de0-86f2-04cb0a2f6e9a", "record_id": "flaws_cloudtrail:0000006:ad1a4f1f-49fe-4de0-86f2-04cb0a2f6e9a", "row_index": 6, "timestamp": "2018-08-05T17:08:26Z", "event_type": "DescribeRepositories", "event_source": "ecr.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 990, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad1a4f1f-49fe-4de0-86f2-04cb0a2f6e9a", "eventTime": "2018-08-05T17:08:26Z", "eventName": "DescribeRepositories", "eventSource": "ecr.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd3ecd48-bcdb-45ef-8a46-04e11943d4", "record_id": "flaws_cloudtrail:0000007:bd3ecd48-bcdb-45ef-8a46-04e11943d4", "row_index": 7, "timestamp": "2018-08-05T17:08:26Z", "event_type": "DescribeRepositories", "event_source": "ecr.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 988, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd3ecd48-bcdb-45ef-8a46-04e11943d4", "eventTime": "2018-08-05T17:08:26Z", "eventName": "DescribeRepositories", "eventSource": "ecr.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d173e217-bf69-4fba-92fe-0825531b42c8", "record_id": "flaws_cloudtrail:0000008:d173e217-bf69-4fba-92fe-0825531b42c8", "row_index": 8, "timestamp": "2018-08-05T17:08:27Z", "event_type": "DescribeRepositories", "event_source": "ecr.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 990, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d173e217-bf69-4fba-92fe-0825531b42c8", "eventTime": "2018-08-05T17:08:27Z", "eventName": "DescribeRepositories", "eventSource": "ecr.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41ca1bc6-c3bf-4853-b79e-377154fcb252", "record_id": "flaws_cloudtrail:0000009:41ca1bc6-c3bf-4853-b79e-377154fcb252", "row_index": 9, "timestamp": "2018-08-05T17:08:28Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1014, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41ca1bc6-c3bf-4853-b79e-377154fcb252", "eventTime": "2018-08-05T17:08:28Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80108cd-33cb-464b-a410-c953dc6d4714", "record_id": "flaws_cloudtrail:0000010:80108cd-33cb-464b-a410-c953dc6d4714", "row_index": 10, "timestamp": "2018-08-05T17:08:29Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1012, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80108cd-33cb-464b-a410-c953dc6d4714", "eventTime": "2018-08-05T17:08:29Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-west-3", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "411331d1-95ff-4be8-8fd2-44319a8dda52", "record_id": "flaws_cloudtrail:0000011:411331d1-95ff-4be8-8fd2-44319a8dda52", "row_index": 11, "timestamp": "2018-08-05T17:08:30Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1013, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "411331d1-95ff-4be8-8fd2-44319a8dda52", "eventTime": "2018-08-05T17:08:30Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69748-dc84-445d-a48f-631858e05bf4", "record_id": "flaws_cloudtrail:0000012:69748-dc84-445d-a48f-631858e05bf4", "row_index": 12, "timestamp": "2018-08-05T17:08:31Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1011, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69748-dc84-445d-a48f-631858e05bf4", "eventTime": "2018-08-05T17:08:31Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "058befe3-8a2f-41c7-9c55-60594bae6e4d", "record_id": "flaws_cloudtrail:0000013:058befe3-8a2f-41c7-9c55-60594bae6e4d", "row_index": 13, "timestamp": "2018-08-05T17:08:32Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1018, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "058befe3-8a2f-41c7-9c55-60594bae6e4d", "eventTime": "2018-08-05T17:08:32Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2891b39-aaf6-4c4a-a0d0-e4f408236d1", "record_id": "flaws_cloudtrail:0000014:f2891b39-aaf6-4c4a-a0d0-e4f408236d1", "row_index": 14, "timestamp": "2018-08-05T17:08:33Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1017, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2891b39-aaf6-4c4a-a0d0-e4f408236d1", "eventTime": "2018-08-05T17:08:33Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5aa9120e-bacd-446e-a225-b11c77b84722", "record_id": "flaws_cloudtrail:0000015:5aa9120e-bacd-446e-a225-b11c77b84722", "row_index": 15, "timestamp": "2018-08-05T17:08:34Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1013, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5aa9120e-bacd-446e-a225-b11c77b84722", "eventTime": "2018-08-05T17:08:34Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c96b6b5-9431-4884-b3cc-56871c43bc57", "record_id": "flaws_cloudtrail:0000016:5c96b6b5-9431-4884-b3cc-56871c43bc57", "row_index": 16, "timestamp": "2018-08-05T17:08:35Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1016, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c96b6b5-9431-4884-b3cc-56871c43bc57", "eventTime": "2018-08-05T17:08:35Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fd25ada-182e-4cc4-b2fe-6006f5a09dea", "record_id": "flaws_cloudtrail:0000017:1fd25ada-182e-4cc4-b2fe-6006f5a09dea", "row_index": 17, "timestamp": "2018-08-05T17:08:36Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1017, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fd25ada-182e-4cc4-b2fe-6006f5a09dea", "eventTime": "2018-08-05T17:08:36Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26a238135-865c-4b14-9905-b1996ec415ec", "record_id": "flaws_cloudtrail:0000018:26a238135-865c-4b14-9905-b1996ec415ec", "row_index": 18, "timestamp": "2018-08-05T17:08:37Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1019, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26a238135-865c-4b14-9905-b1996ec415ec", "eventTime": "2018-08-05T17:08:37Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "708b0baf-579b-4fc8-aa13-b6bff127d7dd", "record_id": "flaws_cloudtrail:0000019:708b0baf-579b-4fc8-aa13-b6bff127d7dd", "row_index": 19, "timestamp": "2018-08-05T17:08:38Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1014, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "708b0baf-579b-4fc8-aa13-b6bff127d7dd", "eventTime": "2018-08-05T17:08:38Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2e73d6b-fb82-41b8-ab87-c9e3acbb97d4", "record_id": "flaws_cloudtrail:0000020:a2e73d6b-fb82-41b8-ab87-c9e3acbb97d4", "row_index": 20, "timestamp": "2018-08-05T17:08:39Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1013, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2e73d6b-fb82-41b8-ab87-c9e3acbb97d4", "eventTime": "2018-08-05T17:08:39Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52442b18-031f-422b-9a66-f861fc6addc7", "record_id": "flaws_cloudtrail:0000021:52442b18-031f-422b-9a66-f861fc6addc7", "row_index": 21, "timestamp": "2018-08-05T17:08:39Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1013, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52442b18-031f-422b-9a66-f861fc6addc7", "eventTime": "2018-08-05T17:08:39Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "511fdfed-e65b-467e-b302-1228f26c321a", "record_id": "flaws_cloudtrail:0000022:511fdfed-e65b-467e-b302-1228f26c321a", "row_index": 22, "timestamp": "2018-08-05T17:08:40Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1014, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "511fdfed-e65b-467e-b302-1228f26c321a", "eventTime": "2018-08-05T17:08:40Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d263791b1-34fe-4e84-9bb8-62883cc4d50", "record_id": "flaws_cloudtrail:0000023:d263791b1-34fe-4e84-9bb8-62883cc4d50", "row_index": 23, "timestamp": "2018-08-05T17:08:40Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1013, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d263791b1-34fe-4e84-9bb8-62883cc4d50", "eventTime": "2018-08-05T17:08:40Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"maxRecords": 100}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55245fff-1527-4803-b79b-cff1e34990d0", "record_id": "flaws_cloudtrail:0000024:55245fff-1527-4803-b79b-cff1e34990d0", "row_index": 24, "timestamp": "2018-08-05T17:08:42Z", "event_type": "DescribeApplications", "event_source": "elasticbeanstalk.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1004, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55245fff-1527-4803-b79b-cff1e34990d0", "eventTime": "2018-08-05T17:08:42Z", "eventName": "DescribeApplications", "eventSource": "elasticbeanstalk.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4bfc39fa-e3ea-4a51-836f-0d50e3acf21b", "record_id": "flaws_cloudtrail:0000025:4bfc39fa-e3ea-4a51-836f-0d50e3acf21b", "row_index": 25, "timestamp": "2018-08-05T17:08:43Z", "event_type": "DescribeApplications", "event_source": "elasticbeanstalk.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1002, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4bfc39fa-e3ea-4a51-836f-0d50e3acf21b", "eventTime": "2018-08-05T17:08:43Z", "eventName": "DescribeApplications", "eventSource": "elasticbeanstalk.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-west-3", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e7fc5ea0-6e8c-47c2-8be4-8c62a5583e86", "record_id": "flaws_cloudtrail:0000026:e7fc5ea0-6e8c-47c2-8be4-8c62a5583e86", "row_index": 26, "timestamp": "2018-08-05T17:08:44Z", "event_type": "DescribeApplications", "event_source": "elasticbeanstalk.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1003, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e7fc5ea0-6e8c-47c2-8be4-8c62a5583e86", "eventTime": "2018-08-05T17:08:44Z", "eventName": "DescribeApplications", "eventSource": "elasticbeanstalk.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8cba7cdb-8941-4980-a362-a73d6fddd8bd", "record_id": "flaws_cloudtrail:0000027:8cba7cdb-8941-4980-a362-a73d6fddd8bd", "row_index": 27, "timestamp": "2018-08-05T17:08:45Z", "event_type": "DescribeApplications", "event_source": "elasticbeanstalk.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1003, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8cba7cdb-8941-4980-a362-a73d6fddd8bd", "eventTime": "2018-08-05T17:08:45Z", "eventName": "DescribeApplications", "eventSource": "elasticbeanstalk.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be1d5812-86e4-4ce0-b420-487e0c441319", "record_id": "flaws_cloudtrail:0000028:be1d5812-86e4-4ce0-b420-487e0c441319", "row_index": 28, "timestamp": "2018-08-05T17:08:46Z", "event_type": "DescribeApplications", "event_source": "elasticbeanstalk.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be1d5812-86e4-4ce0-b420-487e0c441319", "eventTime": "2018-08-05T17:08:46Z", "eventName": "DescribeApplications", "eventSource": "elasticbeanstalk.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84bad0af-91ee-4ac2-a238-b9ad06a242278", "record_id": "flaws_cloudtrail:0000029:84bad0af-91ee-4ac2-a238-b9ad06a242278", "row_index": 29, "timestamp": "2018-08-05T17:08:47Z", "event_type": "DescribeApplications", "event_source": "elasticbeanstalk.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1009, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84bad0af-91ee-4ac2-a238-b9ad06a242278", "eventTime": "2018-08-05T17:08:47Z", "eventName": "DescribeApplications", "eventSource": "elasticbeanstalk.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a4d7a4e3-45c4-4500-b04c-26d2f12f43f6", "record_id": "flaws_cloudtrail:0000030:a4d7a4e3-45c4-4500-b04c-26d2f12f43f6", "row_index": 30, "timestamp": "2018-08-05T17:08:48Z", "event_type": "DescribeApplications", "event_source": "elasticbeanstalk.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1006, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a4d7a4e3-45c4-4500-b04c-26d2f12f43f6", "eventTime": "2018-08-05T17:08:48Z", "eventName": "DescribeApplications", "eventSource": "elasticbeanstalk.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0e6d576-b7e0-448e-ac3d-ce4e3dbb8f2e", "record_id": "flaws_cloudtrail:0000031:b0e6d576-b7e0-448e-ac3d-ce4e3dbb8f2e", "row_index": 31, "timestamp": "2018-08-05T17:08:48Z", "event_type": "DescribeApplications", "event_source": "elasticbeanstalk.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 999, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0e6d576-b7e0-448e-ac3d-ce4e3dbb8f2e", "eventTime": "2018-08-05T17:08:48Z", "eventName": "DescribeApplications", "eventSource": "elasticbeanstalk.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37d47c71-0ce8-45e3-ae08-74d1af82bc7f", "record_id": "flaws_cloudtrail:0000032:37d47c71-0ce8-45e3-ae08-74d1af82bc7f", "row_index": 32, "timestamp": "2018-08-05T17:08:50Z", "event_type": "DescribeApplications", "event_source": "elasticbeanstalk.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37d47c71-0ce8-45e3-ae08-74d1af82bc7f", "eventTime": "2018-08-05T17:08:50Z", "eventName": "DescribeApplications", "eventSource": "elasticbeanstalk.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc4c8152-8295-4038-89cc-f59b0b03a1da", "record_id": "flaws_cloudtrail:0000033:fc4c8152-8295-4038-89cc-f59b0b03a1da", "row_index": 33, "timestamp": "2018-08-05T17:08:51Z", "event_type": "DescribeApplications", "event_source": "elasticbeanstalk.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc4c8152-8295-4038-89cc-f59b0b03a1da", "eventTime": "2018-08-05T17:08:51Z", "eventName": "DescribeApplications", "eventSource": "elasticbeanstalk.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21104dd1-24f0-461d-9e41-32509d5d781f", "record_id": "flaws_cloudtrail:0000034:21104dd1-24f0-461d-9e41-32509d5d781f", "row_index": 34, "timestamp": "2018-08-05T17:08:52Z", "event_type": "DescribeApplications", "event_source": "elasticbeanstalk.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1006, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21104dd1-24f0-461d-9e41-32509d5d781f", "eventTime": "2018-08-05T17:08:52Z", "eventName": "DescribeApplications", "eventSource": "elasticbeanstalk.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d5d2361-4c8e-4362-860f-34c3797b0c0e", "record_id": "flaws_cloudtrail:0000035:1d5d2361-4c8e-4362-860f-34c3797b0c0e", "row_index": 35, "timestamp": "2018-08-05T17:08:52Z", "event_type": "DescribeApplications", "event_source": "elasticbeanstalk.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1003, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d5d2361-4c8e-4362-860f-34c3797b0c0e", "eventTime": "2018-08-05T17:08:52Z", "eventName": "DescribeApplications", "eventSource": "elasticbeanstalk.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffce2e72-9e71-4e21-9bf5-35df78d576948", "record_id": "flaws_cloudtrail:0000036:ffce2e72-9e71-4e21-9bf5-35df78d576948", "row_index": 36, "timestamp": "2018-08-05T17:08:53Z", "event_type": "DescribeApplications", "event_source": "elasticbeanstalk.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1005, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffce2e72-9e71-4e21-9bf5-35df78d576948", "eventTime": "2018-08-05T17:08:53Z", "eventName": "DescribeApplications", "eventSource": "elasticbeanstalk.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9fb6a2a5-0ca4-4cb3-b4ac-328222d39ce5", "record_id": "flaws_cloudtrail:0000037:9fb6a2a5-0ca4-4cb3-b4ac-328222d39ce5", "row_index": 37, "timestamp": "2018-08-05T17:08:53Z", "event_type": "DescribeApplications", "event_source": "elasticbeanstalk.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1003, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9fb6a2a5-0ca4-4cb3-b4ac-328222d39ce5", "eventTime": "2018-08-05T17:08:53Z", "eventName": "DescribeApplications", "eventSource": "elasticbeanstalk.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "042795-0d86-42ca-b0b7-070f1c12ccc7", "record_id": "flaws_cloudtrail:0000038:042795-0d86-42ca-b0b7-070f1c12ccc7", "row_index": 38, "timestamp": "2018-08-05T17:08:54Z", "event_type": "DescribeApplications", "event_source": "elasticbeanstalk.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1001, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "042795-0d86-42ca-b0b7-070f1c12ccc7", "eventTime": "2018-08-05T17:08:54Z", "eventName": "DescribeApplications", "eventSource": "elasticbeanstalk.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2bdfb881-3cb3-481b-960e-e58535cf67c8", "record_id": "flaws_cloudtrail:0000039:2bdfb881-3cb3-481b-960e-e58535cf67c8", "row_index": 39, "timestamp": "2018-08-05T17:09:04Z", "event_type": "ListStackResources", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2bdfb881-3cb3-481b-960e-e58535cf67c8", "eventTime": "2018-08-05T17:09:04Z", "eventName": "ListStackResources", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba872abd-f702-4154-aa44-681ed04519d5", "record_id": "flaws_cloudtrail:0000040:ba872abd-f702-4154-aa44-681ed04519d5", "row_index": 40, "timestamp": "2018-08-05T17:09:04Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba872abd-f702-4154-aa44-681ed04519d5", "eventTime": "2018-08-05T17:09:04Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ce12399-6894-46c1-acdb-7856e946684f", "record_id": "flaws_cloudtrail:0000041:8ce12399-6894-46c1-acdb-7856e946684f", "row_index": 41, "timestamp": "2018-08-05T17:09:04Z", "event_type": "DescribeStackEvents", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ce12399-6894-46c1-acdb-7856e946684f", "eventTime": "2018-08-05T17:09:04Z", "eventName": "DescribeStackEvents", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e9ed04a-702b-4b13-b0e8-942b979069a2a", "record_id": "flaws_cloudtrail:0000042:8e9ed04a-702b-4b13-b0e8-942b979069a2a", "row_index": 42, "timestamp": "2018-08-05T17:09:05Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e9ed04a-702b-4b13-b0e8-942b979069a2a", "eventTime": "2018-08-05T17:09:05Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d1d634f-9188-4d4a-909f-967dec130a1c", "record_id": "flaws_cloudtrail:0000043:2d1d634f-9188-4d4a-909f-967dec130a1c", "row_index": 43, "timestamp": "2018-08-05T17:09:05Z", "event_type": "ListChangeSets", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d1d634f-9188-4d4a-909f-967dec130a1c", "eventTime": "2018-08-05T17:09:05Z", "eventName": "ListChangeSets", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76c8957b-1e08-4006-b2b1-9e414133b3f13", "record_id": "flaws_cloudtrail:0000044:76c8957b-1e08-4006-b2b1-9e414133b3f13", "row_index": 44, "timestamp": "2018-08-05T17:09:15Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76c8957b-1e08-4006-b2b1-9e414133b3f13", "eventTime": "2018-08-05T17:09:15Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fedca7eb-84f6-41da-949f-b1742db3f83d", "record_id": "flaws_cloudtrail:0000045:fedca7eb-84f6-41da-949f-b1742db3f83d", "row_index": 45, "timestamp": "2018-08-05T17:09:16Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1034, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fedca7eb-84f6-41da-949f-b1742db3f83d", "eventTime": "2018-08-05T17:09:16Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "190edfa5-36b6-407b-acf2-ec409cc77633", "record_id": "flaws_cloudtrail:0000046:190edfa5-36b6-407b-acf2-ec409cc77633", "row_index": 46, "timestamp": "2018-08-05T17:09:17Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1034, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "190edfa5-36b6-407b-acf2-ec409cc77633", "eventTime": "2018-08-05T17:09:17Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4f98604-9b42-44f8-9266-7e3f7563eb6f", "record_id": "flaws_cloudtrail:0000047:c4f98604-9b42-44f8-9266-7e3f7563eb6f", "row_index": 47, "timestamp": "2018-08-05T17:09:47Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1034, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4f98604-9b42-44f8-9266-7e3f7563eb6f", "eventTime": "2018-08-05T17:09:47Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89ae758a-814f-47f6-b7cb-0cfb11da5f89", "record_id": "flaws_cloudtrail:0000048:89ae758a-814f-47f6-b7cb-0cfb11da5f89", "row_index": 48, "timestamp": "2018-08-05T17:09:48Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1032, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89ae758a-814f-47f6-b7cb-0cfb11da5f89", "eventTime": "2018-08-05T17:09:48Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad04d17f-46df-4362-85dd-e9816980316d", "record_id": "flaws_cloudtrail:0000049:ad04d17f-46df-4362-85dd-e9816980316d", "row_index": 49, "timestamp": "2018-08-05T17:09:49Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1029, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad04d17f-46df-4362-85dd-e9816980316d", "eventTime": "2018-08-05T17:09:49Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8768e26-f347-4851-ba45-57055c2", "record_id": "flaws_cloudtrail:0000050:d8768e26-f347-4851-ba45-57055c2", "row_index": 50, "timestamp": "2018-08-05T17:09:49Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1024, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8768e26-f347-4851-ba45-57055c2", "eventTime": "2018-08-05T17:09:49Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0cadafb-7af3-46e3-8f31-aaf15222d", "record_id": "flaws_cloudtrail:0000051:e0cadafb-7af3-46e3-8f31-aaf15222d", "row_index": 51, "timestamp": "2018-08-05T17:09:49Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1026, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0cadafb-7af3-46e3-8f31-aaf15222d", "eventTime": "2018-08-05T17:09:49Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "adf9bab1-d4f5-4a47-82f3-890b2e612de5", "record_id": "flaws_cloudtrail:0000052:adf9bab1-d4f5-4a47-82f3-890b2e612de5", "row_index": 52, "timestamp": "2018-08-05T17:09:50Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1029, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "adf9bab1-d4f5-4a47-82f3-890b2e612de5", "eventTime": "2018-08-05T17:09:50Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9f6a75f-9cbb-41be-aa75-e80ec202070e8", "record_id": "flaws_cloudtrail:0000053:e9f6a75f-9cbb-41be-aa75-e80ec202070e8", "row_index": 53, "timestamp": "2018-08-05T17:09:51Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 986, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9f6a75f-9cbb-41be-aa75-e80ec202070e8", "eventTime": "2018-08-05T17:09:51Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14ba287e-1297-4737-a5e8-79f0236ff2df", "record_id": "flaws_cloudtrail:0000054:14ba287e-1297-4737-a5e8-79f0236ff2df", "row_index": 54, "timestamp": "2018-08-05T17:09:52Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 983, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14ba287e-1297-4737-a5e8-79f0236ff2df", "eventTime": "2018-08-05T17:09:52Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-west-3", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00805b-4c78-450a-a012-2ebc75a9472e", "record_id": "flaws_cloudtrail:0000055:00805b-4c78-450a-a012-2ebc75a9472e", "row_index": 55, "timestamp": "2018-08-05T17:09:53Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 982, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00805b-4c78-450a-a012-2ebc75a9472e", "eventTime": "2018-08-05T17:09:53Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fcdca5db-4d54-4388-a3a3-ad788722f4bc", "record_id": "flaws_cloudtrail:0000056:fcdca5db-4d54-4388-a3a3-ad788722f4bc", "row_index": 56, "timestamp": "2018-08-05T17:09:54Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fcdca5db-4d54-4388-a3a3-ad788722f4bc", "eventTime": "2018-08-05T17:09:54Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d978266-a4fa-4972-aaae-4fa39e30d4a6", "record_id": "flaws_cloudtrail:0000057:d978266-a4fa-4972-aaae-4fa39e30d4a6", "row_index": 57, "timestamp": "2018-08-05T17:09:55Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 987, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d978266-a4fa-4972-aaae-4fa39e30d4a6", "eventTime": "2018-08-05T17:09:55Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd8cc8bf-9232-4a41-b669-599521a525b2", "record_id": "flaws_cloudtrail:0000058:dd8cc8bf-9232-4a41-b669-599521a525b2", "row_index": 58, "timestamp": "2018-08-05T17:09:56Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 990, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd8cc8bf-9232-4a41-b669-599521a525b2", "eventTime": "2018-08-05T17:09:56Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e9e1b58-d7d9-45b9-a0b1-11e06fc49469", "record_id": "flaws_cloudtrail:0000059:8e9e1b58-d7d9-45b9-a0b1-11e06fc49469", "row_index": 59, "timestamp": "2018-08-05T17:09:57Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e9e1b58-d7d9-45b9-a0b1-11e06fc49469", "eventTime": "2018-08-05T17:09:57Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d531af9e-1032-4656-983a-a600e0fcc7a0", "record_id": "flaws_cloudtrail:0000060:d531af9e-1032-4656-983a-a600e0fcc7a0", "row_index": 60, "timestamp": "2018-08-05T17:09:58Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 987, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d531af9e-1032-4656-983a-a600e0fcc7a0", "eventTime": "2018-08-05T17:09:58Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb66955b-0d36-4413-9ae0-e637930f9c", "record_id": "flaws_cloudtrail:0000061:cb66955b-0d36-4413-9ae0-e637930f9c", "row_index": 61, "timestamp": "2018-08-05T17:09:59Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 987, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb66955b-0d36-4413-9ae0-e637930f9c", "eventTime": "2018-08-05T17:09:59Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02c2fab9-5302-4ac5-81a2-75eb1602d0b3", "record_id": "flaws_cloudtrail:0000062:02c2fab9-5302-4ac5-81a2-75eb1602d0b3", "row_index": 62, "timestamp": "2018-08-05T17:10:00Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 989, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02c2fab9-5302-4ac5-81a2-75eb1602d0b3", "eventTime": "2018-08-05T17:10:00Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb10397d-1c6e-4158-b786-93c1d166af45", "record_id": "flaws_cloudtrail:0000063:cb10397d-1c6e-4158-b786-93c1d166af45", "row_index": 63, "timestamp": "2018-08-05T17:10:02Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 987, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb10397d-1c6e-4158-b786-93c1d166af45", "eventTime": "2018-08-05T17:10:02Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37d3886b-8a4a-4028-bbb6-41b14914", "record_id": "flaws_cloudtrail:0000064:37d3886b-8a4a-4028-bbb6-41b14914", "row_index": 64, "timestamp": "2018-08-05T17:10:02Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 978, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37d3886b-8a4a-4028-bbb6-41b14914", "eventTime": "2018-08-05T17:10:02Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c33ab11-66f1-49e2-af45-fdcabf860122", "record_id": "flaws_cloudtrail:0000065:4c33ab11-66f1-49e2-af45-fdcabf860122", "row_index": 65, "timestamp": "2018-08-05T17:10:02Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c33ab11-66f1-49e2-af45-fdcabf860122", "eventTime": "2018-08-05T17:10:02Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b807d7de-1674-40ee-bf2e-3cb78159fb8f", "record_id": "flaws_cloudtrail:0000066:b807d7de-1674-40ee-bf2e-3cb78159fb8f", "row_index": 66, "timestamp": "2018-08-05T17:10:03Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b807d7de-1674-40ee-bf2e-3cb78159fb8f", "eventTime": "2018-08-05T17:10:03Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4b1fa84-97a9-428a-903e-9b2b948b4de9", "record_id": "flaws_cloudtrail:0000067:f4b1fa84-97a9-428a-903e-9b2b948b4de9", "row_index": 67, "timestamp": "2018-08-05T17:10:03Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4b1fa84-97a9-428a-903e-9b2b948b4de9", "eventTime": "2018-08-05T17:10:03Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b7364ae-6f30-44c9-b6aa-584bf8fa78c7", "record_id": "flaws_cloudtrail:0000068:4b7364ae-6f30-44c9-b6aa-584bf8fa78c7", "row_index": 68, "timestamp": "2018-08-05T17:10:05Z", "event_type": "DescribeEventBus", "event_source": "events.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1095, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b7364ae-6f30-44c9-b6aa-584bf8fa78c7", "eventTime": "2018-08-05T17:10:05Z", "eventName": "DescribeEventBus", "eventSource": "events.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "responseElements": {"arn": "arn:aws:events:ap-south-1:811596193553:event-bus/default", "name": "default"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0644dfa-ffcd-40f8-8596-ffc6f9cb263c", "record_id": "flaws_cloudtrail:0000069:d0644dfa-ffcd-40f8-8596-ffc6f9cb263c", "row_index": 69, "timestamp": "2018-08-05T17:10:05Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0644dfa-ffcd-40f8-8596-ffc6f9cb263c", "eventTime": "2018-08-05T17:10:05Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9438de4d-c169-4e50-9244-b4f8cf1ab726", "record_id": "flaws_cloudtrail:0000070:9438de4d-c169-4e50-9244-b4f8cf1ab726", "row_index": 70, "timestamp": "2018-08-05T17:10:05Z", "event_type": "ListStackResources", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9438de4d-c169-4e50-9244-b4f8cf1ab726", "eventTime": "2018-08-05T17:10:05Z", "eventName": "ListStackResources", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e1f04ed-e2ac-4816-8722-7f2d5fae6a22", "record_id": "flaws_cloudtrail:0000071:8e1f04ed-e2ac-4816-8722-7f2d5fae6a22", "row_index": 71, "timestamp": "2018-08-05T17:10:05Z", "event_type": "DescribeStackEvents", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e1f04ed-e2ac-4816-8722-7f2d5fae6a22", "eventTime": "2018-08-05T17:10:05Z", "eventName": "DescribeStackEvents", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9cd763fb-d1c0-4cb9-a13c-14cbd48409c3", "record_id": "flaws_cloudtrail:0000072:9cd763fb-d1c0-4cb9-a13c-14cbd48409c3", "row_index": 72, "timestamp": "2018-08-05T17:10:06Z", "event_type": "DescribeEventBus", "event_source": "events.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9cd763fb-d1c0-4cb9-a13c-14cbd48409c3", "eventTime": "2018-08-05T17:10:06Z", "eventName": "DescribeEventBus", "eventSource": "events.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-west-3", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "responseElements": {"arn": "arn:aws:events:eu-west-3:811596193553:event-bus/default", "name": "default"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39f8b9ff-f61d-4924-ac3a-bff55db92b1a", "record_id": "flaws_cloudtrail:0000073:39f8b9ff-f61d-4924-ac3a-bff55db92b1a", "row_index": 73, "timestamp": "2018-08-05T17:10:06Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39f8b9ff-f61d-4924-ac3a-bff55db92b1a", "eventTime": "2018-08-05T17:10:06Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c5eddf1-2f4a-4892-85cb-f7dfd9943429", "record_id": "flaws_cloudtrail:0000074:3c5eddf1-2f4a-4892-85cb-f7dfd9943429", "row_index": 74, "timestamp": "2018-08-05T17:10:06Z", "event_type": "ListChangeSets", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c5eddf1-2f4a-4892-85cb-f7dfd9943429", "eventTime": "2018-08-05T17:10:06Z", "eventName": "ListChangeSets", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73f689c9-5552-48d9-99a3-02d536f633295", "record_id": "flaws_cloudtrail:0000075:73f689c9-5552-48d9-99a3-02d536f633295", "row_index": 75, "timestamp": "2018-08-05T17:10:07Z", "event_type": "DescribeEventBus", "event_source": "events.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73f689c9-5552-48d9-99a3-02d536f633295", "eventTime": "2018-08-05T17:10:07Z", "eventName": "DescribeEventBus", "eventSource": "events.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "responseElements": {"arn": "arn:aws:events:eu-west-1:811596193553:event-bus/default", "name": "default"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "507e96bb-38ca-436e-b24c-19f5c7e61935", "record_id": "flaws_cloudtrail:0000076:507e96bb-38ca-436e-b24c-19f5c7e61935", "row_index": 76, "timestamp": "2018-08-05T17:10:07Z", "event_type": "DescribeEventBus", "event_source": "events.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "507e96bb-38ca-436e-b24c-19f5c7e61935", "eventTime": "2018-08-05T17:10:07Z", "eventName": "DescribeEventBus", "eventSource": "events.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "responseElements": {"arn": "arn:aws:events:eu-west-2:811596193553:event-bus/default", "name": "default"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4e85d5a-496e-4331-acb5-a208285fdb3f", "record_id": "flaws_cloudtrail:0000077:d4e85d5a-496e-4331-acb5-a208285fdb3f", "row_index": 77, "timestamp": "2018-08-05T17:10:08Z", "event_type": "DescribeEventBus", "event_source": "events.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1103, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4e85d5a-496e-4331-acb5-a208285fdb3f", "eventTime": "2018-08-05T17:10:08Z", "eventName": "DescribeEventBus", "eventSource": "events.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "responseElements": {"arn": "arn:aws:events:ap-northeast-2:811596193553:event-bus/default", "name": "default"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ff6e8c2-4068-4c83-85b1-38589cf3e2", "record_id": "flaws_cloudtrail:0000078:8ff6e8c2-4068-4c83-85b1-38589cf3e2", "row_index": 78, "timestamp": "2018-08-05T17:10:09Z", "event_type": "DescribeEventBus", "event_source": "events.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ff6e8c2-4068-4c83-85b1-38589cf3e2", "eventTime": "2018-08-05T17:10:09Z", "eventName": "DescribeEventBus", "eventSource": "events.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "responseElements": {"arn": "arn:aws:events:ap-northeast-1:811596193553:event-bus/default", "name": "default"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fce8b3a7-c9a4-4810-b2b3-b59419ddee44", "record_id": "flaws_cloudtrail:0000079:fce8b3a7-c9a4-4810-b2b3-b59419ddee44", "row_index": 79, "timestamp": "2018-08-05T17:10:11Z", "event_type": "DescribeEventBus", "event_source": "events.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fce8b3a7-c9a4-4810-b2b3-b59419ddee44", "eventTime": "2018-08-05T17:10:11Z", "eventName": "DescribeEventBus", "eventSource": "events.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "responseElements": {"arn": "arn:aws:events:ca-central-1:811596193553:event-bus/default", "name": "default"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11c105de-aa64-4b86-8ac5-c7bd3b1628ee", "record_id": "flaws_cloudtrail:0000080:11c105de-aa64-4b86-8ac5-c7bd3b1628ee", "row_index": 80, "timestamp": "2018-08-05T17:10:11Z", "event_type": "DescribeEventBus", "event_source": "events.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11c105de-aa64-4b86-8ac5-c7bd3b1628ee", "eventTime": "2018-08-05T17:10:11Z", "eventName": "DescribeEventBus", "eventSource": "events.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "responseElements": {"arn": "arn:aws:events:sa-east-1:811596193553:event-bus/default", "name": "default"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "497ccdf3-ba2f-4750-b9b4-e41cba6a9743", "record_id": "flaws_cloudtrail:0000081:497ccdf3-ba2f-4750-b9b4-e41cba6a9743", "row_index": 81, "timestamp": "2018-08-05T17:10:12Z", "event_type": "DescribeEventBus", "event_source": "events.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1103, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "497ccdf3-ba2f-4750-b9b4-e41cba6a9743", "eventTime": "2018-08-05T17:10:12Z", "eventName": "DescribeEventBus", "eventSource": "events.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "responseElements": {"arn": "arn:aws:events:ap-southeast-1:811596193553:event-bus/default", "name": "default"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab3c6793-3c8c-4f0d-a04b-a6982a5f0c0b", "record_id": "flaws_cloudtrail:0000082:ab3c6793-3c8c-4f0d-a04b-a6982a5f0c0b", "row_index": 82, "timestamp": "2018-08-05T17:10:13Z", "event_type": "DescribeEventBus", "event_source": "events.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1103, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab3c6793-3c8c-4f0d-a04b-a6982a5f0c0b", "eventTime": "2018-08-05T17:10:13Z", "eventName": "DescribeEventBus", "eventSource": "events.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "responseElements": {"arn": "arn:aws:events:ap-southeast-2:811596193553:event-bus/default", "name": "default"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3cce8cc5-2b5b-4125-bfe6-f0995e43e777", "record_id": "flaws_cloudtrail:0000083:3cce8cc5-2b5b-4125-bfe6-f0995e43e777", "row_index": 83, "timestamp": "2018-08-05T17:10:15Z", "event_type": "DescribeEventBus", "event_source": "events.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3cce8cc5-2b5b-4125-bfe6-f0995e43e777", "eventTime": "2018-08-05T17:10:15Z", "eventName": "DescribeEventBus", "eventSource": "events.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "responseElements": {"arn": "arn:aws:events:eu-central-1:811596193553:event-bus/default", "name": "default"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6176e77e-1aad-4716-aeed-7d6fb85a86fe", "record_id": "flaws_cloudtrail:0000084:6176e77e-1aad-4716-aeed-7d6fb85a86fe", "row_index": 84, "timestamp": "2018-08-05T17:10:15Z", "event_type": "DescribeEventBus", "event_source": "events.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6176e77e-1aad-4716-aeed-7d6fb85a86fe", "eventTime": "2018-08-05T17:10:15Z", "eventName": "DescribeEventBus", "eventSource": "events.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "responseElements": {"arn": "arn:aws:events:us-east-1:811596193553:event-bus/default", "name": "default"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "469004d3f-2b96-49e8-920b-d9316e5b9eb0", "record_id": "flaws_cloudtrail:0000085:469004d3f-2b96-49e8-920b-d9316e5b9eb0", "row_index": 85, "timestamp": "2018-08-05T17:10:15Z", "event_type": "DescribeEventBus", "event_source": "events.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1094, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "469004d3f-2b96-49e8-920b-d9316e5b9eb0", "eventTime": "2018-08-05T17:10:15Z", "eventName": "DescribeEventBus", "eventSource": "events.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "responseElements": {"arn": "arn:aws:events:us-east-2:811596193553:event-bus/default", "name": "default"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f63dc3a2-3f52-4178-962c-bf6efe6a3f47", "record_id": "flaws_cloudtrail:0000086:f63dc3a2-3f52-4178-962c-bf6efe6a3f47", "row_index": 86, "timestamp": "2018-08-05T17:10:16Z", "event_type": "DescribeEventBus", "event_source": "events.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f63dc3a2-3f52-4178-962c-bf6efe6a3f47", "eventTime": "2018-08-05T17:10:16Z", "eventName": "DescribeEventBus", "eventSource": "events.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "responseElements": {"arn": "arn:aws:events:us-west-1:811596193553:event-bus/default", "name": "default"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e2ad2d3-ef02-42fc-952b-575d6bbddd7c", "record_id": "flaws_cloudtrail:0000087:9e2ad2d3-ef02-42fc-952b-575d6bbddd7c", "row_index": 87, "timestamp": "2018-08-05T17:10:16Z", "event_type": "DescribeEventBus", "event_source": "events.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e2ad2d3-ef02-42fc-952b-575d6bbddd7c", "eventTime": "2018-08-05T17:10:16Z", "eventName": "DescribeEventBus", "eventSource": "events.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "responseElements": {"arn": "arn:aws:events:us-west-2:811596193553:event-bus/default", "name": "default"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65ad0df6-4168-4569-ae91-ffb5dc974518a", "record_id": "flaws_cloudtrail:0000088:65ad0df6-4168-4569-ae91-ffb5dc974518a", "row_index": 88, "timestamp": "2018-08-05T17:10:17Z", "event_type": "ListRules", "event_source": "events.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1010, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65ad0df6-4168-4569-ae91-ffb5dc974518a", "eventTime": "2018-08-05T17:10:17Z", "eventName": "ListRules", "eventSource": "events.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37cb92a6-52a5-4e15-b5dd-57c29961c6d1", "record_id": "flaws_cloudtrail:0000089:37cb92a6-52a5-4e15-b5dd-57c29961c6d1", "row_index": 89, "timestamp": "2018-08-05T17:10:18Z", "event_type": "ListRules", "event_source": "events.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37cb92a6-52a5-4e15-b5dd-57c29961c6d1", "eventTime": "2018-08-05T17:10:18Z", "eventName": "ListRules", "eventSource": "events.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e63900-e524-4c6d-af02-60e42f498545", "record_id": "flaws_cloudtrail:0000090:8e63900-e524-4c6d-af02-60e42f498545", "row_index": 90, "timestamp": "2018-08-05T17:10:18Z", "event_type": "ListRules", "event_source": "events.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1007, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e63900-e524-4c6d-af02-60e42f498545", "eventTime": "2018-08-05T17:10:18Z", "eventName": "ListRules", "eventSource": "events.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-west-3", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d0a7598-afee-43bf-9627-5f6aa6173ee1", "record_id": "flaws_cloudtrail:0000091:7d0a7598-afee-43bf-9627-5f6aa6173ee1", "row_index": 91, "timestamp": "2018-08-05T17:10:19Z", "event_type": "ListRules", "event_source": "events.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d0a7598-afee-43bf-9627-5f6aa6173ee1", "eventTime": "2018-08-05T17:10:19Z", "eventName": "ListRules", "eventSource": "events.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82a944753-0a91-460a-995a-6f1ae33e0894", "record_id": "flaws_cloudtrail:0000092:82a944753-0a91-460a-995a-6f1ae33e0894", "row_index": 92, "timestamp": "2018-08-05T17:10:20Z", "event_type": "ListRules", "event_source": "events.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1014, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82a944753-0a91-460a-995a-6f1ae33e0894", "eventTime": "2018-08-05T17:10:20Z", "eventName": "ListRules", "eventSource": "events.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68ec16a1-025f-4527-84c0-f48e07450a5", "record_id": "flaws_cloudtrail:0000093:68ec16a1-025f-4527-84c0-f48e07450a5", "row_index": 93, "timestamp": "2018-08-05T17:10:21Z", "event_type": "ListRules", "event_source": "events.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1012, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68ec16a1-025f-4527-84c0-f48e07450a5", "eventTime": "2018-08-05T17:10:21Z", "eventName": "ListRules", "eventSource": "events.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "102139f4-4690-4e9c-a060-57e347b26c07", "record_id": "flaws_cloudtrail:0000094:102139f4-4690-4e9c-a060-57e347b26c07", "row_index": 94, "timestamp": "2018-08-05T17:10:22Z", "event_type": "ListRules", "event_source": "events.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1011, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "102139f4-4690-4e9c-a060-57e347b26c07", "eventTime": "2018-08-05T17:10:22Z", "eventName": "ListRules", "eventSource": "events.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5544c3c1-44d4-4411-bad6-f29a84e709be", "record_id": "flaws_cloudtrail:0000095:5544c3c1-44d4-4411-bad6-f29a84e709be", "row_index": 95, "timestamp": "2018-08-05T17:10:22Z", "event_type": "ListRules", "event_source": "events.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5544c3c1-44d4-4411-bad6-f29a84e709be", "eventTime": "2018-08-05T17:10:22Z", "eventName": "ListRules", "eventSource": "events.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e96fac0c-68a1-4d5f-8f0c-794d9f9c403d", "record_id": "flaws_cloudtrail:0000096:e96fac0c-68a1-4d5f-8f0c-794d9f9c403d", "row_index": 96, "timestamp": "2018-08-05T17:10:23Z", "event_type": "ListRules", "event_source": "events.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1012, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e96fac0c-68a1-4d5f-8f0c-794d9f9c403d", "eventTime": "2018-08-05T17:10:23Z", "eventName": "ListRules", "eventSource": "events.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b08402-400b-42aa-a8f4-43ebe619df08", "record_id": "flaws_cloudtrail:0000097:9b08402-400b-42aa-a8f4-43ebe619df08", "row_index": 97, "timestamp": "2018-08-05T17:10:24Z", "event_type": "ListRules", "event_source": "events.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1012, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b08402-400b-42aa-a8f4-43ebe619df08", "eventTime": "2018-08-05T17:10:24Z", "eventName": "ListRules", "eventSource": "events.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93cc9aa5-83c0-46dc-96bc-892929634c87", "record_id": "flaws_cloudtrail:0000098:93cc9aa5-83c0-46dc-96bc-892929634c87", "row_index": 98, "timestamp": "2018-08-05T17:10:25Z", "event_type": "ListRules", "event_source": "events.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1009, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93cc9aa5-83c0-46dc-96bc-892929634c87", "eventTime": "2018-08-05T17:10:25Z", "eventName": "ListRules", "eventSource": "events.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38075bba-02e8-45f7-be9a-a1156295f9d5", "record_id": "flaws_cloudtrail:0000099:38075bba-02e8-45f7-be9a-a1156295f9d5", "row_index": 99, "timestamp": "2018-08-05T17:10:25Z", "event_type": "ListRules", "event_source": "events.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38075bba-02e8-45f7-be9a-a1156295f9d5", "eventTime": "2018-08-05T17:10:25Z", "eventName": "ListRules", "eventSource": "events.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b27300c-dc58-46df-bec0-272d6d7e50bf", "record_id": "flaws_cloudtrail:0000100:b27300c-dc58-46df-bec0-272d6d7e50bf", "row_index": 100, "timestamp": "2018-08-05T17:10:25Z", "event_type": "ListRules", "event_source": "events.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1007, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b27300c-dc58-46df-bec0-272d6d7e50bf", "eventTime": "2018-08-05T17:10:25Z", "eventName": "ListRules", "eventSource": "events.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4eda83bc-c96c-4218-ba46-24a50b6966ad", "record_id": "flaws_cloudtrail:0000101:4eda83bc-c96c-4218-ba46-24a50b6966ad", "row_index": 101, "timestamp": "2018-08-05T17:10:26Z", "event_type": "ListRules", "event_source": "events.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4eda83bc-c96c-4218-ba46-24a50b6966ad", "eventTime": "2018-08-05T17:10:26Z", "eventName": "ListRules", "eventSource": "events.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b71d8567-00d3-4233-a15f-5fe53643fbba", "record_id": "flaws_cloudtrail:0000102:b71d8567-00d3-4233-a15f-5fe53643fbba", "row_index": 102, "timestamp": "2018-08-05T17:10:26Z", "event_type": "ListRules", "event_source": "events.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b71d8567-00d3-4233-a15f-5fe53643fbba", "eventTime": "2018-08-05T17:10:26Z", "eventName": "ListRules", "eventSource": "events.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "198278-a303-4e7c-b905-e703e018b3fa", "record_id": "flaws_cloudtrail:0000103:198278-a303-4e7c-b905-e703e018b3fa", "row_index": 103, "timestamp": "2018-08-05T17:10:27Z", "event_type": "ListDeliveryStreams", "event_source": "firehose.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 993, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "198278-a303-4e7c-b905-e703e018b3fa", "eventTime": "2018-08-05T17:10:27Z", "eventName": "ListDeliveryStreams", "eventSource": "firehose.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d463475b-036e-4c62-89a6-224928d0c88e0", "record_id": "flaws_cloudtrail:0000104:8d463475b-036e-4c62-89a6-224928d0c88e0", "row_index": 104, "timestamp": "2018-08-05T17:10:28Z", "event_type": "ListDeliveryStreams", "event_source": "firehose.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 996, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d463475b-036e-4c62-89a6-224928d0c88e0", "eventTime": "2018-08-05T17:10:28Z", "eventName": "ListDeliveryStreams", "eventSource": "firehose.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-west-3", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fac548839-5887-4955-ae13-34ed045fc26c", "record_id": "flaws_cloudtrail:0000105:fac548839-5887-4955-ae13-34ed045fc26c", "row_index": 105, "timestamp": "2018-08-05T17:10:29Z", "event_type": "ListDeliveryStreams", "event_source": "firehose.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 995, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fac548839-5887-4955-ae13-34ed045fc26c", "eventTime": "2018-08-05T17:10:29Z", "eventName": "ListDeliveryStreams", "eventSource": "firehose.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8e83ec7-d785-43e1-b664-0c87dcc4bc99", "record_id": "flaws_cloudtrail:0000106:b8e83ec7-d785-43e1-b664-0c87dcc4bc99", "row_index": 106, "timestamp": "2018-08-05T17:10:30Z", "event_type": "ListDeliveryStreams", "event_source": "firehose.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 996, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8e83ec7-d785-43e1-b664-0c87dcc4bc99", "eventTime": "2018-08-05T17:10:30Z", "eventName": "ListDeliveryStreams", "eventSource": "firehose.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c90dc831-cda8-4eab-be68-8dc1e151d4cf", "record_id": "flaws_cloudtrail:0000107:c90dc831-cda8-4eab-be68-8dc1e151d4cf", "row_index": 107, "timestamp": "2018-08-05T17:10:31Z", "event_type": "ListDeliveryStreams", "event_source": "firehose.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 999, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c90dc831-cda8-4eab-be68-8dc1e151d4cf", "eventTime": "2018-08-05T17:10:31Z", "eventName": "ListDeliveryStreams", "eventSource": "firehose.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f15093b2-f425-492b-a7ed-940f800e9446", "record_id": "flaws_cloudtrail:0000108:f15093b2-f425-492b-a7ed-940f800e9446", "row_index": 108, "timestamp": "2018-08-05T17:10:32Z", "event_type": "ListDeliveryStreams", "event_source": "firehose.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 999, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f15093b2-f425-492b-a7ed-940f800e9446", "eventTime": "2018-08-05T17:10:32Z", "eventName": "ListDeliveryStreams", "eventSource": "firehose.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0bcd3be-2972-4067-bbaa-2cc103290826", "record_id": "flaws_cloudtrail:0000109:c0bcd3be-2972-4067-bbaa-2cc103290826", "row_index": 109, "timestamp": "2018-08-05T17:10:33Z", "event_type": "ListDeliveryStreams", "event_source": "firehose.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 994, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0bcd3be-2972-4067-bbaa-2cc103290826", "eventTime": "2018-08-05T17:10:33Z", "eventName": "ListDeliveryStreams", "eventSource": "firehose.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e25cd8d-590d-4744-a3a9-40034e640d6a", "record_id": "flaws_cloudtrail:0000110:3e25cd8d-590d-4744-a3a9-40034e640d6a", "row_index": 110, "timestamp": "2018-08-05T17:10:34Z", "event_type": "ListDeliveryStreams", "event_source": "firehose.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 997, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e25cd8d-590d-4744-a3a9-40034e640d6a", "eventTime": "2018-08-05T17:10:34Z", "eventName": "ListDeliveryStreams", "eventSource": "firehose.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca44e7da-e4c7-44b5-99a9-873055ca2ec5", "record_id": "flaws_cloudtrail:0000111:ca44e7da-e4c7-44b5-99a9-873055ca2ec5", "row_index": 111, "timestamp": "2018-08-05T17:10:35Z", "event_type": "ListDeliveryStreams", "event_source": "firehose.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 999, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca44e7da-e4c7-44b5-99a9-873055ca2ec5", "eventTime": "2018-08-05T17:10:35Z", "eventName": "ListDeliveryStreams", "eventSource": "firehose.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "814348ac-4c7e-4b55-b7f0-8efb9b0a3dd8", "record_id": "flaws_cloudtrail:0000112:814348ac-4c7e-4b55-b7f0-8efb9b0a3dd8", "row_index": 112, "timestamp": "2018-08-05T17:10:36Z", "event_type": "ListDeliveryStreams", "event_source": "firehose.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1000, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "814348ac-4c7e-4b55-b7f0-8efb9b0a3dd8", "eventTime": "2018-08-05T17:10:36Z", "eventName": "ListDeliveryStreams", "eventSource": "firehose.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb11f678-ab99-4e61-8061-327fa496805a0", "record_id": "flaws_cloudtrail:0000113:fb11f678-ab99-4e61-8061-327fa496805a0", "row_index": 113, "timestamp": "2018-08-05T17:10:38Z", "event_type": "ListDeliveryStreams", "event_source": "firehose.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 998, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb11f678-ab99-4e61-8061-327fa496805a0", "eventTime": "2018-08-05T17:10:38Z", "eventName": "ListDeliveryStreams", "eventSource": "firehose.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a37b3e13-47a4-4365-8286-c82ec30e9900", "record_id": "flaws_cloudtrail:0000114:a37b3e13-47a4-4365-8286-c82ec30e9900", "row_index": 114, "timestamp": "2018-08-05T17:10:38Z", "event_type": "ListDeliveryStreams", "event_source": "firehose.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 994, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a37b3e13-47a4-4365-8286-c82ec30e9900", "eventTime": "2018-08-05T17:10:38Z", "eventName": "ListDeliveryStreams", "eventSource": "firehose.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d9ded66-8bc1-4628-82e6-56b396824f901", "record_id": "flaws_cloudtrail:0000115:2d9ded66-8bc1-4628-82e6-56b396824f901", "row_index": 115, "timestamp": "2018-08-05T17:10:39Z", "event_type": "ListDeliveryStreams", "event_source": "firehose.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 995, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d9ded66-8bc1-4628-82e6-56b396824f901", "eventTime": "2018-08-05T17:10:39Z", "eventName": "ListDeliveryStreams", "eventSource": "firehose.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "934775b6a-2d75-4c26-adaf-4f4b1e12bd20", "record_id": "flaws_cloudtrail:0000116:934775b6a-2d75-4c26-adaf-4f4b1e12bd20", "row_index": 116, "timestamp": "2018-08-05T17:10:39Z", "event_type": "ListDeliveryStreams", "event_source": "firehose.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 994, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "934775b6a-2d75-4c26-adaf-4f4b1e12bd20", "eventTime": "2018-08-05T17:10:39Z", "eventName": "ListDeliveryStreams", "eventSource": "firehose.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2e1001d-113b-4c35-9606-5dce3a316bc9", "record_id": "flaws_cloudtrail:0000117:d2e1001d-113b-4c35-9606-5dce3a316bc9", "row_index": 117, "timestamp": "2018-08-05T17:10:39Z", "event_type": "ListDeliveryStreams", "event_source": "firehose.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 995, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2e1001d-113b-4c35-9606-5dce3a316bc9", "eventTime": "2018-08-05T17:10:39Z", "eventName": "ListDeliveryStreams", "eventSource": "firehose.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "363855ca-69e6-4222-ab18-3f9dd5576b4f", "record_id": "flaws_cloudtrail:0000118:363855ca-69e6-4222-ab18-3f9dd5576b4f", "row_index": 118, "timestamp": "2018-08-05T17:10:40Z", "event_type": "ListVaults", "event_source": "glacier.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1009, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "363855ca-69e6-4222-ab18-3f9dd5576b4f", "eventTime": "2018-08-05T17:10:40Z", "eventName": "ListVaults", "eventSource": "glacier.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"accountId": "-"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9295f723-2bb8-437f-8043-220833e9d5b", "record_id": "flaws_cloudtrail:0000119:9295f723-2bb8-437f-8043-220833e9d5b", "row_index": 119, "timestamp": "2018-08-05T17:10:42Z", "event_type": "ListVaults", "event_source": "glacier.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1007, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9295f723-2bb8-437f-8043-220833e9d5b", "eventTime": "2018-08-05T17:10:42Z", "eventName": "ListVaults", "eventSource": "glacier.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-west-3", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"accountId": "-"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "398f75c7-6e92-409c-9931-bb80ba0520ff", "record_id": "flaws_cloudtrail:0000120:398f75c7-6e92-409c-9931-bb80ba0520ff", "row_index": 120, "timestamp": "2018-08-05T17:10:43Z", "event_type": "ListVaults", "event_source": "glacier.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "398f75c7-6e92-409c-9931-bb80ba0520ff", "eventTime": "2018-08-05T17:10:43Z", "eventName": "ListVaults", "eventSource": "glacier.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"accountId": "-"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5709fb9d-d163-4efb-83d5-4f968f5db12b", "record_id": "flaws_cloudtrail:0000121:5709fb9d-d163-4efb-83d5-4f968f5db12b", "row_index": 121, "timestamp": "2018-08-05T17:10:43Z", "event_type": "ListVaults", "event_source": "glacier.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5709fb9d-d163-4efb-83d5-4f968f5db12b", "eventTime": "2018-08-05T17:10:43Z", "eventName": "ListVaults", "eventSource": "glacier.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"accountId": "-"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec1e6356-b3a1-485a-b9a3-f3ffb42888c2", "record_id": "flaws_cloudtrail:0000122:ec1e6356-b3a1-485a-b9a3-f3ffb42888c2", "row_index": 122, "timestamp": "2018-08-05T17:10:44Z", "event_type": "ListVaults", "event_source": "glacier.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1013, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec1e6356-b3a1-485a-b9a3-f3ffb42888c2", "eventTime": "2018-08-05T17:10:44Z", "eventName": "ListVaults", "eventSource": "glacier.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"accountId": "-"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3aa070c0-6611-4071-8563-efe8cc70f668", "record_id": "flaws_cloudtrail:0000123:3aa070c0-6611-4071-8563-efe8cc70f668", "row_index": 123, "timestamp": "2018-08-05T17:10:45Z", "event_type": "ListVaults", "event_source": "glacier.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1013, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3aa070c0-6611-4071-8563-efe8cc70f668", "eventTime": "2018-08-05T17:10:45Z", "eventName": "ListVaults", "eventSource": "glacier.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"accountId": "-"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c81e6e56-c6d3-487e-b66d-0e144b5df8ca", "record_id": "flaws_cloudtrail:0000124:c81e6e56-c6d3-487e-b66d-0e144b5df8ca", "row_index": 124, "timestamp": "2018-08-05T17:10:54Z", "event_type": "ListVaults", "event_source": "glacier.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1011, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c81e6e56-c6d3-487e-b66d-0e144b5df8ca", "eventTime": "2018-08-05T17:10:54Z", "eventName": "ListVaults", "eventSource": "glacier.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"accountId": "-"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f090194-5760-4276-9d05-54e69162ea0", "record_id": "flaws_cloudtrail:0000125:f090194-5760-4276-9d05-54e69162ea0", "row_index": 125, "timestamp": "2018-08-05T17:10:55Z", "event_type": "ListVaults", "event_source": "glacier.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1011, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f090194-5760-4276-9d05-54e69162ea0", "eventTime": "2018-08-05T17:10:55Z", "eventName": "ListVaults", "eventSource": "glacier.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"accountId": "-"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6182dba0-ffb8-4517-b3f2-f12fb8a5d961", "record_id": "flaws_cloudtrail:0000126:6182dba0-ffb8-4517-b3f2-f12fb8a5d961", "row_index": 126, "timestamp": "2018-08-05T17:10:56Z", "event_type": "ListVaults", "event_source": "glacier.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1013, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6182dba0-ffb8-4517-b3f2-f12fb8a5d961", "eventTime": "2018-08-05T17:10:56Z", "eventName": "ListVaults", "eventSource": "glacier.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"accountId": "-"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b8fb54b-823f-4caa-988b-8ea4ce472f33", "record_id": "flaws_cloudtrail:0000127:1b8fb54b-823f-4caa-988b-8ea4ce472f33", "row_index": 127, "timestamp": "2018-08-05T17:10:57Z", "event_type": "ListVaults", "event_source": "glacier.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1011, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b8fb54b-823f-4caa-988b-8ea4ce472f33", "eventTime": "2018-08-05T17:10:57Z", "eventName": "ListVaults", "eventSource": "glacier.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"accountId": "-"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd767769b-e286-43d6-b7c5-9f5fc2124f1b", "record_id": "flaws_cloudtrail:0000128:dd767769b-e286-43d6-b7c5-9f5fc2124f1b", "row_index": 128, "timestamp": "2018-08-05T17:10:58Z", "event_type": "ListVaults", "event_source": "glacier.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1009, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd767769b-e286-43d6-b7c5-9f5fc2124f1b", "eventTime": "2018-08-05T17:10:58Z", "eventName": "ListVaults", "eventSource": "glacier.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"accountId": "-"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b8756a7-6ee2-45de-9b2b-45557cab6df9", "record_id": "flaws_cloudtrail:0000129:4b8756a7-6ee2-45de-9b2b-45557cab6df9", "row_index": 129, "timestamp": "2018-08-05T17:10:58Z", "event_type": "ListVaults", "event_source": "glacier.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b8756a7-6ee2-45de-9b2b-45557cab6df9", "eventTime": "2018-08-05T17:10:58Z", "eventName": "ListVaults", "eventSource": "glacier.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"accountId": "-"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b6f518c-ec13-4f3e-9f29-ff9d1e491fe3", "record_id": "flaws_cloudtrail:0000130:5b6f518c-ec13-4f3e-9f29-ff9d1e491fe3", "row_index": 130, "timestamp": "2018-08-05T17:10:58Z", "event_type": "ListVaults", "event_source": "glacier.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b6f518c-ec13-4f3e-9f29-ff9d1e491fe3", "eventTime": "2018-08-05T17:10:58Z", "eventName": "ListVaults", "eventSource": "glacier.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"accountId": "-"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2715d582-d3ca-4be3-b3c5-a813482e0261c", "record_id": "flaws_cloudtrail:0000131:2715d582-d3ca-4be3-b3c5-a813482e0261c", "row_index": 131, "timestamp": "2018-08-05T17:10:58Z", "event_type": "ListVaults", "event_source": "glacier.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1009, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2715d582-d3ca-4be3-b3c5-a813482e0261c", "eventTime": "2018-08-05T17:10:58Z", "eventName": "ListVaults", "eventSource": "glacier.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"accountId": "-"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eff1e141-09b4-4fc0-ae54-33c7a4ba39c0", "record_id": "flaws_cloudtrail:0000132:eff1e141-09b4-4fc0-ae54-33c7a4ba39c0", "row_index": 132, "timestamp": "2018-08-05T17:11:00Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1010, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eff1e141-09b4-4fc0-ae54-33c7a4ba39c0", "eventTime": "2018-08-05T17:11:00Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "665b9283-01ef-499b-9631-f4308f8f07cd", "record_id": "flaws_cloudtrail:0000133:665b9283-01ef-499b-9631-f4308f8f07cd", "row_index": 133, "timestamp": "2018-08-05T17:11:01Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1009, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "665b9283-01ef-499b-9631-f4308f8f07cd", "eventTime": "2018-08-05T17:11:01Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-west-3", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4c70886-b6a2-45e6-949e-fb5dfd1d51a3", "record_id": "flaws_cloudtrail:0000134:f4c70886-b6a2-45e6-949e-fb5dfd1d51a3", "row_index": 134, "timestamp": "2018-08-05T17:11:02Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1009, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4c70886-b6a2-45e6-949e-fb5dfd1d51a3", "eventTime": "2018-08-05T17:11:02Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "031d5543-bf8b-4f6a-87f2-ca75207e14de", "record_id": "flaws_cloudtrail:0000135:031d5543-bf8b-4f6a-87f2-ca75207e14de", "row_index": 135, "timestamp": "2018-08-05T17:11:03Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "031d5543-bf8b-4f6a-87f2-ca75207e14de", "eventTime": "2018-08-05T17:11:03Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b62adcd7-b520-40f4-8f62-2add3db8991f", "record_id": "flaws_cloudtrail:0000136:b62adcd7-b520-40f4-8f62-2add3db8991f", "row_index": 136, "timestamp": "2018-08-05T17:11:04Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1014, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b62adcd7-b520-40f4-8f62-2add3db8991f", "eventTime": "2018-08-05T17:11:04Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5e9c899-9f55-4187-815d-a89297057587", "record_id": "flaws_cloudtrail:0000137:f5e9c899-9f55-4187-815d-a89297057587", "row_index": 137, "timestamp": "2018-08-05T17:11:05Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1014, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5e9c899-9f55-4187-815d-a89297057587", "eventTime": "2018-08-05T17:11:05Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "159f5139-441c-4714-aafb-61d9d1e712e5", "record_id": "flaws_cloudtrail:0000138:159f5139-441c-4714-aafb-61d9d1e712e5", "row_index": 138, "timestamp": "2018-08-05T17:11:06Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1012, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "159f5139-441c-4714-aafb-61d9d1e712e5", "eventTime": "2018-08-05T17:11:06Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "546a5ac5-fb82-4a83-8732-30a1774fd2cc", "record_id": "flaws_cloudtrail:0000139:546a5ac5-fb82-4a83-8732-30a1774fd2cc", "row_index": 139, "timestamp": "2018-08-05T17:11:06Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1009, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "546a5ac5-fb82-4a83-8732-30a1774fd2cc", "eventTime": "2018-08-05T17:11:06Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e87c4251-480c-45dc-8c06-33cfe0c21fc0", "record_id": "flaws_cloudtrail:0000140:e87c4251-480c-45dc-8c06-33cfe0c21fc0", "row_index": 140, "timestamp": "2018-08-05T17:11:06Z", "event_type": "ListStackResources", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e87c4251-480c-45dc-8c06-33cfe0c21fc0", "eventTime": "2018-08-05T17:11:06Z", "eventName": "ListStackResources", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e928dfb3-a2a6-4691-bee4-75c35fb4afed", "record_id": "flaws_cloudtrail:0000141:e928dfb3-a2a6-4691-bee4-75c35fb4afed", "row_index": 141, "timestamp": "2018-08-05T17:11:06Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e928dfb3-a2a6-4691-bee4-75c35fb4afed", "eventTime": "2018-08-05T17:11:06Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0bab2691-f192-4ac3-96ec-7c607a8affd1", "record_id": "flaws_cloudtrail:0000142:0bab2691-f192-4ac3-96ec-7c607a8affd1", "row_index": 142, "timestamp": "2018-08-05T17:11:06Z", "event_type": "DescribeStackEvents", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0bab2691-f192-4ac3-96ec-7c607a8affd1", "eventTime": "2018-08-05T17:11:06Z", "eventName": "DescribeStackEvents", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dbeb12ab-ab13-469a-b876-5f8bf5c200270", "record_id": "flaws_cloudtrail:0000143:dbeb12ab-ab13-469a-b876-5f8bf5c200270", "row_index": 143, "timestamp": "2018-08-05T17:11:07Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1016, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dbeb12ab-ab13-469a-b876-5f8bf5c200270", "eventTime": "2018-08-05T17:11:07Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff329ef9-fc2f-42bd-baf1-f0d25799ade", "record_id": "flaws_cloudtrail:0000144:ff329ef9-fc2f-42bd-baf1-f0d25799ade", "row_index": 144, "timestamp": "2018-08-05T17:11:07Z", "event_type": "ListChangeSets", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff329ef9-fc2f-42bd-baf1-f0d25799ade", "eventTime": "2018-08-05T17:11:07Z", "eventName": "ListChangeSets", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b12a9f8a-18c0-4a67-8dbe-bd5937c64002", "record_id": "flaws_cloudtrail:0000145:b12a9f8a-18c0-4a67-8dbe-bd5937c64002", "row_index": 145, "timestamp": "2018-08-05T17:11:07Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b12a9f8a-18c0-4a67-8dbe-bd5937c64002", "eventTime": "2018-08-05T17:11:07Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "207f4248-6a91-43e5-9391-93b54334bc0", "record_id": "flaws_cloudtrail:0000146:207f4248-6a91-43e5-9391-93b54334bc0", "row_index": 146, "timestamp": "2018-08-05T17:11:09Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1013, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "207f4248-6a91-43e5-9391-93b54334bc0", "eventTime": "2018-08-05T17:11:09Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed789b97-a8ae-4d5e-9fd9-51bedb455e5c", "record_id": "flaws_cloudtrail:0000147:ed789b97-a8ae-4d5e-9fd9-51bedb455e5c", "row_index": 147, "timestamp": "2018-08-05T17:11:10Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1012, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed789b97-a8ae-4d5e-9fd9-51bedb455e5c", "eventTime": "2018-08-05T17:11:10Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfdd6307-135a-4641-b8ce-4bea7a952c5b", "record_id": "flaws_cloudtrail:0000148:dfdd6307-135a-4641-b8ce-4bea7a952c5b", "row_index": 148, "timestamp": "2018-08-05T17:11:10Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1009, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfdd6307-135a-4641-b8ce-4bea7a952c5b", "eventTime": "2018-08-05T17:11:10Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d43505f-4e1b-4596-a359-5f0aea0ad8f2", "record_id": "flaws_cloudtrail:0000149:0d43505f-4e1b-4596-a359-5f0aea0ad8f2", "row_index": 149, "timestamp": "2018-08-05T17:11:11Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1009, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d43505f-4e1b-4596-a359-5f0aea0ad8f2", "eventTime": "2018-08-05T17:11:11Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06326e91-fc16-4e34-98d6-d0ad1293a18e", "record_id": "flaws_cloudtrail:0000150:06326e91-fc16-4e34-98d6-d0ad1293a18e", "row_index": 150, "timestamp": "2018-08-05T17:11:11Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1009, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06326e91-fc16-4e34-98d6-d0ad1293a18e", "eventTime": "2018-08-05T17:11:11Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90febbcd-80ae-4704-b594-608946b459", "record_id": "flaws_cloudtrail:0000151:90febbcd-80ae-4704-b594-608946b459", "row_index": 151, "timestamp": "2018-08-05T17:11:11Z", "event_type": "ListKeys", "event_source": "kms.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1006, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90febbcd-80ae-4704-b594-608946b459", "eventTime": "2018-08-05T17:11:11Z", "eventName": "ListKeys", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aefdc01d-8ef8-46c2-9891-6d1e5778a52a", "record_id": "flaws_cloudtrail:0000152:aefdc01d-8ef8-46c2-9891-6d1e5778a52a", "row_index": 152, "timestamp": "2018-08-05T17:11:13Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 989, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aefdc01d-8ef8-46c2-9891-6d1e5778a52a", "eventTime": "2018-08-05T17:11:13Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0505fd7-9b63-4244-9fc1-2aa2fb718d5c", "record_id": "flaws_cloudtrail:0000153:e0505fd7-9b63-4244-9fc1-2aa2fb718d5c", "row_index": 153, "timestamp": "2018-08-05T17:11:14Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 990, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0505fd7-9b63-4244-9fc1-2aa2fb718d5c", "eventTime": "2018-08-05T17:11:14Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-west-3", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f882d436-2438-47a6-83d6-da9ffa0dcfba", "record_id": "flaws_cloudtrail:0000154:f882d436-2438-47a6-83d6-da9ffa0dcfba", "row_index": 154, "timestamp": "2018-08-05T17:11:15Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 992, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f882d436-2438-47a6-83d6-da9ffa0dcfba", "eventTime": "2018-08-05T17:11:15Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffe796e6-e304-4971-be1f-d2fb02da5175", "record_id": "flaws_cloudtrail:0000155:ffe796e6-e304-4971-be1f-d2fb02da5175", "row_index": 155, "timestamp": "2018-08-05T17:11:16Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 992, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffe796e6-e304-4971-be1f-d2fb02da5175", "eventTime": "2018-08-05T17:11:16Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "526ed85a-dd58-4560-8f7d-566fd5145ecb", "record_id": "flaws_cloudtrail:0000156:526ed85a-dd58-4560-8f7d-566fd5145ecb", "row_index": 156, "timestamp": "2018-08-05T17:11:17Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 994, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "526ed85a-dd58-4560-8f7d-566fd5145ecb", "eventTime": "2018-08-05T17:11:17Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6da459811-eaad-4ea2-b53a-0ee62d64d64f", "record_id": "flaws_cloudtrail:0000157:6da459811-eaad-4ea2-b53a-0ee62d64d64f", "row_index": 157, "timestamp": "2018-08-05T17:11:18Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 997, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6da459811-eaad-4ea2-b53a-0ee62d64d64f", "eventTime": "2018-08-05T17:11:18Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dea0d730-4c53-4094-8120-649379772785", "record_id": "flaws_cloudtrail:0000158:dea0d730-4c53-4094-8120-649379772785", "row_index": 158, "timestamp": "2018-08-05T17:11:20Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 995, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dea0d730-4c53-4094-8120-649379772785", "eventTime": "2018-08-05T17:11:20Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "095dfc88-afde-4e33-9e7d-867089646929", "record_id": "flaws_cloudtrail:0000159:095dfc88-afde-4e33-9e7d-867089646929", "row_index": 159, "timestamp": "2018-08-05T17:11:20Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 993, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "095dfc88-afde-4e33-9e7d-867089646929", "eventTime": "2018-08-05T17:11:20Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dbef4be2-8249-47cd-aedc-ab7d3da8a26f", "record_id": "flaws_cloudtrail:0000160:dbef4be2-8249-47cd-aedc-ab7d3da8a26f", "row_index": 160, "timestamp": "2018-08-05T17:11:22Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 997, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dbef4be2-8249-47cd-aedc-ab7d3da8a26f", "eventTime": "2018-08-05T17:11:22Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d689229f7-ed11-4e81-a179-b10fca3a9c37", "record_id": "flaws_cloudtrail:0000161:d689229f7-ed11-4e81-a179-b10fca3a9c37", "row_index": 161, "timestamp": "2018-08-05T17:11:23Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 998, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d689229f7-ed11-4e81-a179-b10fca3a9c37", "eventTime": "2018-08-05T17:11:23Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c52beed3-8476-469d-85cf-dfc16852faef", "record_id": "flaws_cloudtrail:0000162:c52beed3-8476-469d-85cf-dfc16852faef", "row_index": 162, "timestamp": "2018-08-05T17:11:25Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 995, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c52beed3-8476-469d-85cf-dfc16852faef", "eventTime": "2018-08-05T17:11:25Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a800986-1f14-4ec7-ab6d-b6d5cba4bc19", "record_id": "flaws_cloudtrail:0000163:8a800986-1f14-4ec7-ab6d-b6d5cba4bc19", "row_index": 163, "timestamp": "2018-08-05T17:11:25Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 992, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a800986-1f14-4ec7-ab6d-b6d5cba4bc19", "eventTime": "2018-08-05T17:11:25Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4edc430-9524-41f5-9468-364705def3d65", "record_id": "flaws_cloudtrail:0000164:f4edc430-9524-41f5-9468-364705def3d65", "row_index": 164, "timestamp": "2018-08-05T17:11:25Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 993, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4edc430-9524-41f5-9468-364705def3d65", "eventTime": "2018-08-05T17:11:25Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df4ad8b0-3307-42c0-9444-b9ea93df9e0b", "record_id": "flaws_cloudtrail:0000165:df4ad8b0-3307-42c0-9444-b9ea93df9e0b", "row_index": 165, "timestamp": "2018-08-05T17:11:26Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 992, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df4ad8b0-3307-42c0-9444-b9ea93df9e0b", "eventTime": "2018-08-05T17:11:26Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e21d6d88-709e-4064-81c6-9366b550181", "record_id": "flaws_cloudtrail:0000166:e21d6d88-709e-4064-81c6-9366b550181", "row_index": 166, "timestamp": "2018-08-05T17:11:26Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 988, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e21d6d88-709e-4064-81c6-9366b550181", "eventTime": "2018-08-05T17:11:26Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ce1f255-7618-4b11-8b66-d11008aa72eb", "record_id": "flaws_cloudtrail:0000167:0ce1f255-7618-4b11-8b66-d11008aa72eb", "row_index": 167, "timestamp": "2018-08-05T17:11:28Z", "event_type": "DescribeDestinations", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1013, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ce1f255-7618-4b11-8b66-d11008aa72eb", "eventTime": "2018-08-05T17:11:28Z", "eventName": "DescribeDestinations", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a073a33c-f4c4-48da-aa66-9d2492bb1df6", "record_id": "flaws_cloudtrail:0000168:a073a33c-f4c4-48da-aa66-9d2492bb1df6", "row_index": 168, "timestamp": "2018-08-05T17:11:29Z", "event_type": "DescribeDestinations", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1012, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a073a33c-f4c4-48da-aa66-9d2492bb1df6", "eventTime": "2018-08-05T17:11:29Z", "eventName": "DescribeDestinations", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-west-3", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b43ad6c-4e19-4f1f-81dd-a704ff726ecc", "record_id": "flaws_cloudtrail:0000169:1b43ad6c-4e19-4f1f-81dd-a704ff726ecc", "row_index": 169, "timestamp": "2018-08-05T17:11:30Z", "event_type": "DescribeDestinations", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1012, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b43ad6c-4e19-4f1f-81dd-a704ff726ecc", "eventTime": "2018-08-05T17:11:30Z", "eventName": "DescribeDestinations", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "305af7ed-95d3-4186-ad4e-523c228748ff", "record_id": "flaws_cloudtrail:0000170:305af7ed-95d3-4186-ad4e-523c228748ff", "row_index": 170, "timestamp": "2018-08-05T17:11:31Z", "event_type": "DescribeDestinations", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1013, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "305af7ed-95d3-4186-ad4e-523c228748ff", "eventTime": "2018-08-05T17:11:31Z", "eventName": "DescribeDestinations", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "399fb3cd-39ec-46e4-9378-7ada9d7d168f", "record_id": "flaws_cloudtrail:0000171:399fb3cd-39ec-46e4-9378-7ada9d7d168f", "row_index": 171, "timestamp": "2018-08-05T17:11:32Z", "event_type": "DescribeDestinations", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1017, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "399fb3cd-39ec-46e4-9378-7ada9d7d168f", "eventTime": "2018-08-05T17:11:32Z", "eventName": "DescribeDestinations", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "075f3ffc-9ed1-4382-ba7c-d6a6ecc36609", "record_id": "flaws_cloudtrail:0000172:075f3ffc-9ed1-4382-ba7c-d6a6ecc36609", "row_index": 172, "timestamp": "2018-08-05T17:11:32Z", "event_type": "DescribeDestinations", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1018, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "075f3ffc-9ed1-4382-ba7c-d6a6ecc36609", "eventTime": "2018-08-05T17:11:32Z", "eventName": "DescribeDestinations", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30d5fd5e-0932-4098-acc3-0e76f0afd04a", "record_id": "flaws_cloudtrail:0000173:30d5fd5e-0932-4098-acc3-0e76f0afd04a", "row_index": 173, "timestamp": "2018-08-05T17:11:33Z", "event_type": "DescribeDestinations", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1015, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30d5fd5e-0932-4098-acc3-0e76f0afd04a", "eventTime": "2018-08-05T17:11:33Z", "eventName": "DescribeDestinations", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4feae20-7f62-4315-8a73-3e444221ae0b", "record_id": "flaws_cloudtrail:0000174:b4feae20-7f62-4315-8a73-3e444221ae0b", "row_index": 174, "timestamp": "2018-08-05T17:11:33Z", "event_type": "DescribeDestinations", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1014, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4feae20-7f62-4315-8a73-3e444221ae0b", "eventTime": "2018-08-05T17:11:33Z", "eventName": "DescribeDestinations", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6298b2e0-a77a-427b-ab67-20fc5c36bca3", "record_id": "flaws_cloudtrail:0000175:6298b2e0-a77a-427b-ab67-20fc5c36bca3", "row_index": 175, "timestamp": "2018-08-05T17:11:35Z", "event_type": "DescribeDestinations", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1017, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6298b2e0-a77a-427b-ab67-20fc5c36bca3", "eventTime": "2018-08-05T17:11:35Z", "eventName": "DescribeDestinations", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dbef012b-6095-4d56-848f-d9f4e7245d6a", "record_id": "flaws_cloudtrail:0000176:dbef012b-6095-4d56-848f-d9f4e7245d6a", "row_index": 176, "timestamp": "2018-08-05T17:11:36Z", "event_type": "DescribeDestinations", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1017, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dbef012b-6095-4d56-848f-d9f4e7245d6a", "eventTime": "2018-08-05T17:11:36Z", "eventName": "DescribeDestinations", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86445-e954-41c0-a2a1-eb976987f", "record_id": "flaws_cloudtrail:0000177:86445-e954-41c0-a2a1-eb976987f", "row_index": 177, "timestamp": "2018-08-05T17:11:37Z", "event_type": "DescribeDestinations", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1009, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86445-e954-41c0-a2a1-eb976987f", "eventTime": "2018-08-05T17:11:37Z", "eventName": "DescribeDestinations", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ea1489f-6130-4098-ad33-2236cfe4428e", "record_id": "flaws_cloudtrail:0000178:7ea1489f-6130-4098-ad33-2236cfe4428e", "row_index": 178, "timestamp": "2018-08-05T17:11:37Z", "event_type": "DescribeDestinations", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1012, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ea1489f-6130-4098-ad33-2236cfe4428e", "eventTime": "2018-08-05T17:11:37Z", "eventName": "DescribeDestinations", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "889612fff-9200-4414-8965-8f0239ddcd9f", "record_id": "flaws_cloudtrail:0000179:889612fff-9200-4414-8965-8f0239ddcd9f", "row_index": 179, "timestamp": "2018-08-05T17:11:38Z", "event_type": "DescribeDestinations", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1013, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "889612fff-9200-4414-8965-8f0239ddcd9f", "eventTime": "2018-08-05T17:11:38Z", "eventName": "DescribeDestinations", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bef6dea0-53e4-4ec1-91d6-5107d5240f84", "record_id": "flaws_cloudtrail:0000180:bef6dea0-53e4-4ec1-91d6-5107d5240f84", "row_index": 180, "timestamp": "2018-08-05T17:11:38Z", "event_type": "DescribeDestinations", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1012, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bef6dea0-53e4-4ec1-91d6-5107d5240f84", "eventTime": "2018-08-05T17:11:38Z", "eventName": "DescribeDestinations", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47f818a4-7db0-4bcf-bf62-9ee3ddd63bab", "record_id": "flaws_cloudtrail:0000181:47f818a4-7db0-4bcf-bf62-9ee3ddd63bab", "row_index": 181, "timestamp": "2018-08-05T17:11:38Z", "event_type": "DescribeDestinations", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1012, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47f818a4-7db0-4bcf-bf62-9ee3ddd63bab", "eventTime": "2018-08-05T17:11:38Z", "eventName": "DescribeDestinations", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04c26d56-b49e-4de6-b05f-12f51f01d50e", "record_id": "flaws_cloudtrail:0000182:04c26d56-b49e-4de6-b05f-12f51f01d50e", "row_index": 182, "timestamp": "2018-08-05T17:11:39Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1011, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04c26d56-b49e-4de6-b05f-12f51f01d50e", "eventTime": "2018-08-05T17:11:39Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2121c08a-617f-4704-8549-6fb4f28396e4", "record_id": "flaws_cloudtrail:0000183:2121c08a-617f-4704-8549-6fb4f28396e4", "row_index": 183, "timestamp": "2018-08-05T17:11:40Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1009, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2121c08a-617f-4704-8549-6fb4f28396e4", "eventTime": "2018-08-05T17:11:40Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-west-3", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6b5182e-0bee-4e64-b362-3f13c597a8af", "record_id": "flaws_cloudtrail:0000184:f6b5182e-0bee-4e64-b362-3f13c597a8af", "row_index": 184, "timestamp": "2018-08-05T17:11:41Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1009, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6b5182e-0bee-4e64-b362-3f13c597a8af", "eventTime": "2018-08-05T17:11:41Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "503463af5-cfcc-46db-bcfa-3634daeab9f5", "record_id": "flaws_cloudtrail:0000185:503463af5-cfcc-46db-bcfa-3634daeab9f5", "row_index": 185, "timestamp": "2018-08-05T17:11:42Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1015, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "503463af5-cfcc-46db-bcfa-3634daeab9f5", "eventTime": "2018-08-05T17:11:42Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43ba9e02-28be-4afa-b7b4-018b554e42dc", "record_id": "flaws_cloudtrail:0000186:43ba9e02-28be-4afa-b7b4-018b554e42dc", "row_index": 186, "timestamp": "2018-08-05T17:11:42Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1009, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43ba9e02-28be-4afa-b7b4-018b554e42dc", "eventTime": "2018-08-05T17:11:42Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63798d7-d43c-4800-ab00-51e30484a9", "record_id": "flaws_cloudtrail:0000187:63798d7-d43c-4800-ab00-51e30484a9", "row_index": 187, "timestamp": "2018-08-05T17:11:43Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1012, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63798d7-d43c-4800-ab00-51e30484a9", "eventTime": "2018-08-05T17:11:43Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "810342e69-2273-4656-9c2a-a75abe7ee492", "record_id": "flaws_cloudtrail:0000188:810342e69-2273-4656-9c2a-a75abe7ee492", "row_index": 188, "timestamp": "2018-08-05T17:11:44Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1013, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "810342e69-2273-4656-9c2a-a75abe7ee492", "eventTime": "2018-08-05T17:11:44Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "761365a3e-6903-4e52-945f-bf8c97a7c576", "record_id": "flaws_cloudtrail:0000189:761365a3e-6903-4e52-945f-bf8c97a7c576", "row_index": 189, "timestamp": "2018-08-05T17:11:44Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1010, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "761365a3e-6903-4e52-945f-bf8c97a7c576", "eventTime": "2018-08-05T17:11:44Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3cfdc3d5-16ae-4c02-89b7-9a6e3f43cd93", "record_id": "flaws_cloudtrail:0000190:3cfdc3d5-16ae-4c02-89b7-9a6e3f43cd93", "row_index": 190, "timestamp": "2018-08-05T17:11:45Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1014, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3cfdc3d5-16ae-4c02-89b7-9a6e3f43cd93", "eventTime": "2018-08-05T17:11:45Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "156ddef9-5512-4a48-b5e1-3b7b8e976fd0", "record_id": "flaws_cloudtrail:0000191:156ddef9-5512-4a48-b5e1-3b7b8e976fd0", "row_index": 191, "timestamp": "2018-08-05T17:11:46Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1014, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "156ddef9-5512-4a48-b5e1-3b7b8e976fd0", "eventTime": "2018-08-05T17:11:46Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d14c34e1-f9f4-4c56-9ab0-a45f46020ed", "record_id": "flaws_cloudtrail:0000192:d14c34e1-f9f4-4c56-9ab0-a45f46020ed", "row_index": 192, "timestamp": "2018-08-05T17:11:47Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1011, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d14c34e1-f9f4-4c56-9ab0-a45f46020ed", "eventTime": "2018-08-05T17:11:47Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3be97d27-976b-4c7e-8118-6af39e1e67ff", "record_id": "flaws_cloudtrail:0000193:3be97d27-976b-4c7e-8118-6af39e1e67ff", "row_index": 193, "timestamp": "2018-08-05T17:11:47Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1006, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3be97d27-976b-4c7e-8118-6af39e1e67ff", "eventTime": "2018-08-05T17:11:47Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dddf892a-8c67-48f8-92c0-10d1c6b51e94", "record_id": "flaws_cloudtrail:0000194:dddf892a-8c67-48f8-92c0-10d1c6b51e94", "row_index": 194, "timestamp": "2018-08-05T17:11:48Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1008, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dddf892a-8c67-48f8-92c0-10d1c6b51e94", "eventTime": "2018-08-05T17:11:48Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36c3ec88-ccc5-44e7-95cc-0e03e281051c", "record_id": "flaws_cloudtrail:0000195:36c3ec88-ccc5-44e7-95cc-0e03e281051c", "row_index": 195, "timestamp": "2018-08-05T17:11:48Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1009, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36c3ec88-ccc5-44e7-95cc-0e03e281051c", "eventTime": "2018-08-05T17:11:48Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f578a753-73e7-4700-8f3e-5d93e17847be", "record_id": "flaws_cloudtrail:0000196:f578a753-73e7-4700-8f3e-5d93e17847be", "row_index": 196, "timestamp": "2018-08-05T17:11:48Z", "event_type": "DescribeLogGroups", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1009, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f578a753-73e7-4700-8f3e-5d93e17847be", "eventTime": "2018-08-05T17:11:48Z", "eventName": "DescribeLogGroups", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f365bc43-1297-42a8-8eaa-144671887dc1", "record_id": "flaws_cloudtrail:0000197:f365bc43-1297-42a8-8eaa-144671887dc1", "row_index": 197, "timestamp": "2018-08-05T17:11:49Z", "event_type": "DescribeResourcePolicies", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1017, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f365bc43-1297-42a8-8eaa-144671887dc1", "eventTime": "2018-08-05T17:11:49Z", "eventName": "DescribeResourcePolicies", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c788d5f0-b7ed-4d48-9fc7-5b5aead84f2c", "record_id": "flaws_cloudtrail:0000198:c788d5f0-b7ed-4d48-9fc7-5b5aead84f2c", "row_index": 198, "timestamp": "2018-08-05T17:11:50Z", "event_type": "DescribeResourcePolicies", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1016, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c788d5f0-b7ed-4d48-9fc7-5b5aead84f2c", "eventTime": "2018-08-05T17:11:50Z", "eventName": "DescribeResourcePolicies", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c36daba3-75a3-4dfa-838b-aa4e38641a77", "record_id": "flaws_cloudtrail:0000199:c36daba3-75a3-4dfa-838b-aa4e38641a77", "row_index": 199, "timestamp": "2018-08-05T17:11:50Z", "event_type": "DescribeResourcePolicies", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1015, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c36daba3-75a3-4dfa-838b-aa4e38641a77", "eventTime": "2018-08-05T17:11:50Z", "eventName": "DescribeResourcePolicies", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-west-3", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d26a5f2-68b2-4592-aadd-31de8552d95c", "record_id": "flaws_cloudtrail:0000200:1d26a5f2-68b2-4592-aadd-31de8552d95c", "row_index": 200, "timestamp": "2018-08-05T17:11:51Z", "event_type": "DescribeResourcePolicies", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1016, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d26a5f2-68b2-4592-aadd-31de8552d95c", "eventTime": "2018-08-05T17:11:51Z", "eventName": "DescribeResourcePolicies", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a059d481-74a9-4925-8bec-c0767d54c665", "record_id": "flaws_cloudtrail:0000201:a059d481-74a9-4925-8bec-c0767d54c665", "row_index": 201, "timestamp": "2018-08-05T17:11:52Z", "event_type": "DescribeResourcePolicies", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1021, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a059d481-74a9-4925-8bec-c0767d54c665", "eventTime": "2018-08-05T17:11:52Z", "eventName": "DescribeResourcePolicies", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f81044-f1f4-467a-a62b-f8d53c7d10e7", "record_id": "flaws_cloudtrail:0000202:0f81044-f1f4-467a-a62b-f8d53c7d10e7", "row_index": 202, "timestamp": "2018-08-05T17:11:53Z", "event_type": "DescribeResourcePolicies", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1020, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f81044-f1f4-467a-a62b-f8d53c7d10e7", "eventTime": "2018-08-05T17:11:53Z", "eventName": "DescribeResourcePolicies", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93a84ee9-21db-4b5e-9949-b8922f0fe348", "record_id": "flaws_cloudtrail:0000203:93a84ee9-21db-4b5e-9949-b8922f0fe348", "row_index": 203, "timestamp": "2018-08-05T17:11:53Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1493, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93a84ee9-21db-4b5e-9949-b8922f0fe348", "eventTime": "2018-08-05T17:11:53Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIASCIFAMU8C7GP6NVW", "expiration": "Aug 5, 2018 11:40:22 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8bfc00e-e489-4b24-9847-95830ebe60c8", "record_id": "flaws_cloudtrail:0000204:a8bfc00e-e489-4b24-9847-95830ebe60c8", "row_index": 204, "timestamp": "2018-08-05T17:11:54Z", "event_type": "DescribeResourcePolicies", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1019, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8bfc00e-e489-4b24-9847-95830ebe60c8", "eventTime": "2018-08-05T17:11:54Z", "eventName": "DescribeResourcePolicies", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19018d5-9ff0-4caf-97fc-422e27861fc1", "record_id": "flaws_cloudtrail:0000205:19018d5-9ff0-4caf-97fc-422e27861fc1", "row_index": 205, "timestamp": "2018-08-05T17:11:54Z", "event_type": "DescribeResourcePolicies", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1012, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19018d5-9ff0-4caf-97fc-422e27861fc1", "eventTime": "2018-08-05T17:11:54Z", "eventName": "DescribeResourcePolicies", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8baf6689-9ff5-488d-9941-3b4fb1a644c7", "record_id": "flaws_cloudtrail:0000206:8baf6689-9ff5-488d-9941-3b4fb1a644c7", "row_index": 206, "timestamp": "2018-08-05T17:11:55Z", "event_type": "DescribeResourcePolicies", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1021, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8baf6689-9ff5-488d-9941-3b4fb1a644c7", "eventTime": "2018-08-05T17:11:55Z", "eventName": "DescribeResourcePolicies", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43842-768b-40f8-87ce-a8e9b8ff87a1", "record_id": "flaws_cloudtrail:0000207:43842-768b-40f8-87ce-a8e9b8ff87a1", "row_index": 207, "timestamp": "2018-08-05T17:11:56Z", "event_type": "DescribeResourcePolicies", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1018, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43842-768b-40f8-87ce-a8e9b8ff87a1", "eventTime": "2018-08-05T17:11:56Z", "eventName": "DescribeResourcePolicies", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6fd837b2-97ba-4fa4-838c-046de69d2b9b", "record_id": "flaws_cloudtrail:0000208:6fd837b2-97ba-4fa4-838c-046de69d2b9b", "row_index": 208, "timestamp": "2018-08-05T17:11:57Z", "event_type": "DescribeResourcePolicies", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1019, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6fd837b2-97ba-4fa4-838c-046de69d2b9b", "eventTime": "2018-08-05T17:11:57Z", "eventName": "DescribeResourcePolicies", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76f6174c-820e-42aa-bfc0-7558ef4dc50d", "record_id": "flaws_cloudtrail:0000209:76f6174c-820e-42aa-bfc0-7558ef4dc50d", "row_index": 209, "timestamp": "2018-08-05T17:11:57Z", "event_type": "DescribeResourcePolicies", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1016, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76f6174c-820e-42aa-bfc0-7558ef4dc50d", "eventTime": "2018-08-05T17:11:57Z", "eventName": "DescribeResourcePolicies", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c93ad43-8bf4-43de-a7fc-9f6ffe11a820", "record_id": "flaws_cloudtrail:0000210:6c93ad43-8bf4-43de-a7fc-9f6ffe11a820", "row_index": 210, "timestamp": "2018-08-05T17:11:57Z", "event_type": "DescribeResourcePolicies", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1016, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c93ad43-8bf4-43de-a7fc-9f6ffe11a820", "eventTime": "2018-08-05T17:11:57Z", "eventName": "DescribeResourcePolicies", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ddb3320e-2d1d-4bba-8fe9-71a469b9b702", "record_id": "flaws_cloudtrail:0000211:ddb3320e-2d1d-4bba-8fe9-71a469b9b702", "row_index": 211, "timestamp": "2018-08-05T17:11:58Z", "event_type": "DescribeResourcePolicies", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1017, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ddb3320e-2d1d-4bba-8fe9-71a469b9b702", "eventTime": "2018-08-05T17:11:58Z", "eventName": "DescribeResourcePolicies", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7dc0a2c-0668-4b09-85d6-c61b12fe936c", "record_id": "flaws_cloudtrail:0000212:c7dc0a2c-0668-4b09-85d6-c61b12fe936c", "row_index": 212, "timestamp": "2018-08-05T17:11:58Z", "event_type": "DescribeResourcePolicies", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "user_name": null, "access_key_id": "ASIAPYBUDZE3ZQU169GB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1016, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7dc0a2c-0668-4b09-85d6-c61b12fe936c", "eventTime": "2018-08-05T17:11:58Z", "eventName": "DescribeResourcePolicies", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4032461535040776536", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4032461535040776536", "accountId": "811596193553", "accessKeyId": "ASIAPYBUDZE3ZQU169GB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:00:49Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "514869f-b9f0-4bd4-9b88-065824a7ada22", "record_id": "flaws_cloudtrail:0000213:514869f-b9f0-4bd4-9b88-065824a7ada22", "row_index": 213, "timestamp": "2018-08-05T17:12:08Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "514869f-b9f0-4bd4-9b88-065824a7ada22", "eventTime": "2018-08-05T17:12:08Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "282e16a2-f635-4ac4-b522-5bb2ffbe2cc2", "record_id": "flaws_cloudtrail:0000214:282e16a2-f635-4ac4-b522-5bb2ffbe2cc2", "row_index": 214, "timestamp": "2018-08-05T17:12:08Z", "event_type": "DescribeStackEvents", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "282e16a2-f635-4ac4-b522-5bb2ffbe2cc2", "eventTime": "2018-08-05T17:12:08Z", "eventName": "DescribeStackEvents", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "726dffaa-1517-48dc-99e9-ea37bce444ca", "record_id": "flaws_cloudtrail:0000215:726dffaa-1517-48dc-99e9-ea37bce444ca", "row_index": 215, "timestamp": "2018-08-05T17:12:08Z", "event_type": "ListStackResources", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "726dffaa-1517-48dc-99e9-ea37bce444ca", "eventTime": "2018-08-05T17:12:08Z", "eventName": "ListStackResources", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ee430306-4732-4c4b-95af-de4fca58a0db", "record_id": "flaws_cloudtrail:0000216:4ee430306-4732-4c4b-95af-de4fca58a0db", "row_index": 216, "timestamp": "2018-08-05T17:12:08Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ee430306-4732-4c4b-95af-de4fca58a0db", "eventTime": "2018-08-05T17:12:08Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94362ac5-7ac7-4588-a212-82d572169b24", "record_id": "flaws_cloudtrail:0000217:94362ac5-7ac7-4588-a212-82d572169b24", "row_index": 217, "timestamp": "2018-08-05T17:12:08Z", "event_type": "ListChangeSets", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94362ac5-7ac7-4588-a212-82d572169b24", "eventTime": "2018-08-05T17:12:08Z", "eventName": "ListChangeSets", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dadc30cf-4e11-4797-85b9-00170ed0d0", "record_id": "flaws_cloudtrail:0000218:dadc30cf-4e11-4797-85b9-00170ed0d0", "row_index": 218, "timestamp": "2018-08-05T17:13:08Z", "event_type": "DescribeStackEvents", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dadc30cf-4e11-4797-85b9-00170ed0d0", "eventTime": "2018-08-05T17:13:08Z", "eventName": "DescribeStackEvents", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3241e2dc-5cbe-4110-8012-21beab6ddc4d", "record_id": "flaws_cloudtrail:0000219:3241e2dc-5cbe-4110-8012-21beab6ddc4d", "row_index": 219, "timestamp": "2018-08-05T17:13:08Z", "event_type": "ListStackResources", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3241e2dc-5cbe-4110-8012-21beab6ddc4d", "eventTime": "2018-08-05T17:13:08Z", "eventName": "ListStackResources", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4aff6fbe-364a-4e3a-bb37-0f6ae31e0091", "record_id": "flaws_cloudtrail:0000220:4aff6fbe-364a-4e3a-bb37-0f6ae31e0091", "row_index": 220, "timestamp": "2018-08-05T17:13:08Z", "event_type": "ListChangeSets", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4aff6fbe-364a-4e3a-bb37-0f6ae31e0091", "eventTime": "2018-08-05T17:13:08Z", "eventName": "ListChangeSets", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7399b0aa-74a4-4d00-b1b5-cdd8ad8fe866", "record_id": "flaws_cloudtrail:0000221:7399b0aa-74a4-4d00-b1b5-cdd8ad8fe866", "row_index": 221, "timestamp": "2018-08-05T17:13:08Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7399b0aa-74a4-4d00-b1b5-cdd8ad8fe866", "eventTime": "2018-08-05T17:13:08Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12928-4633-4889-a052-277812657481", "record_id": "flaws_cloudtrail:0000222:12928-4633-4889-a052-277812657481", "row_index": 222, "timestamp": "2018-08-05T17:13:09Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12928-4633-4889-a052-277812657481", "eventTime": "2018-08-05T17:13:09Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97af18e9-511d-4049-a3f3-4d04c5c561d9", "record_id": "flaws_cloudtrail:0000223:97af18e9-511d-4049-a3f3-4d04c5c561d9", "row_index": 223, "timestamp": "2018-08-05T17:14:09Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97af18e9-511d-4049-a3f3-4d04c5c561d9", "eventTime": "2018-08-05T17:14:09Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf9ed114-ca3f-4082-b288-d9a4ca339fbc", "record_id": "flaws_cloudtrail:0000224:cf9ed114-ca3f-4082-b288-d9a4ca339fbc", "row_index": 224, "timestamp": "2018-08-05T17:14:09Z", "event_type": "ListStackResources", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf9ed114-ca3f-4082-b288-d9a4ca339fbc", "eventTime": "2018-08-05T17:14:09Z", "eventName": "ListStackResources", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36e9179a-637f-4095-9c73-6b8c5f5d6034", "record_id": "flaws_cloudtrail:0000225:36e9179a-637f-4095-9c73-6b8c5f5d6034", "row_index": 225, "timestamp": "2018-08-05T17:14:09Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36e9179a-637f-4095-9c73-6b8c5f5d6034", "eventTime": "2018-08-05T17:14:09Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48a195f0-5b3d-4a18-a1ff-2be90e444005", "record_id": "flaws_cloudtrail:0000226:48a195f0-5b3d-4a18-a1ff-2be90e444005", "row_index": 226, "timestamp": "2018-08-05T17:14:09Z", "event_type": "DescribeStackEvents", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48a195f0-5b3d-4a18-a1ff-2be90e444005", "eventTime": "2018-08-05T17:14:09Z", "eventName": "DescribeStackEvents", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9cdc49b0-5a90-4496-8a86-e0ae392849b0", "record_id": "flaws_cloudtrail:0000227:9cdc49b0-5a90-4496-8a86-e0ae392849b0", "row_index": 227, "timestamp": "2018-08-05T17:14:09Z", "event_type": "ListChangeSets", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9cdc49b0-5a90-4496-8a86-e0ae392849b0", "eventTime": "2018-08-05T17:14:09Z", "eventName": "ListChangeSets", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b37c3c46-8f41-4c7b-8f94-77f3b69b9b4a", "record_id": "flaws_cloudtrail:0000228:b37c3c46-8f41-4c7b-8f94-77f3b69b9b4a", "row_index": 228, "timestamp": "2018-08-05T17:15:10Z", "event_type": "ListStackResources", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b37c3c46-8f41-4c7b-8f94-77f3b69b9b4a", "eventTime": "2018-08-05T17:15:10Z", "eventName": "ListStackResources", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6fbb401d-4b74-4bbe-a3e4-cfa6cf0f197b", "record_id": "flaws_cloudtrail:0000229:6fbb401d-4b74-4bbe-a3e4-cfa6cf0f197b", "row_index": 229, "timestamp": "2018-08-05T17:15:10Z", "event_type": "DescribeStackEvents", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6fbb401d-4b74-4bbe-a3e4-cfa6cf0f197b", "eventTime": "2018-08-05T17:15:10Z", "eventName": "DescribeStackEvents", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6c8df41-c5bd-45e3-8b75-78ff8f51f15a", "record_id": "flaws_cloudtrail:0000230:f6c8df41-c5bd-45e3-8b75-78ff8f51f15a", "row_index": 230, "timestamp": "2018-08-05T17:15:11Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6c8df41-c5bd-45e3-8b75-78ff8f51f15a", "eventTime": "2018-08-05T17:15:11Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb91846b-cbff-439d-99f4-597a646bb4ed", "record_id": "flaws_cloudtrail:0000231:bb91846b-cbff-439d-99f4-597a646bb4ed", "row_index": 231, "timestamp": "2018-08-05T17:15:11Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb91846b-cbff-439d-99f4-597a646bb4ed", "eventTime": "2018-08-05T17:15:11Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b5fd5c3-c8ac-4c84-83ee-8213f69e935c", "record_id": "flaws_cloudtrail:0000232:0b5fd5c3-c8ac-4c84-83ee-8213f69e935c", "row_index": 232, "timestamp": "2018-08-05T17:15:11Z", "event_type": "ListChangeSets", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b5fd5c3-c8ac-4c84-83ee-8213f69e935c", "eventTime": "2018-08-05T17:15:11Z", "eventName": "ListChangeSets", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "177ff939-644d-48b1-a8a9-a260571d64dc3", "record_id": "flaws_cloudtrail:0000233:177ff939-644d-48b1-a8a9-a260571d64dc3", "row_index": 233, "timestamp": "2018-08-05T17:16:11Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "177ff939-644d-48b1-a8a9-a260571d64dc3", "eventTime": "2018-08-05T17:16:11Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "626ee4eb-5c4c-4f24-8adb-72cced6a9c3c", "record_id": "flaws_cloudtrail:0000234:626ee4eb-5c4c-4f24-8adb-72cced6a9c3c", "row_index": 234, "timestamp": "2018-08-05T17:16:11Z", "event_type": "DescribeStackEvents", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "626ee4eb-5c4c-4f24-8adb-72cced6a9c3c", "eventTime": "2018-08-05T17:16:11Z", "eventName": "DescribeStackEvents", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84b0d731-5837-408e-9703-fff62acf4428", "record_id": "flaws_cloudtrail:0000235:84b0d731-5837-408e-9703-fff62acf4428", "row_index": 235, "timestamp": "2018-08-05T17:16:11Z", "event_type": "ListStackResources", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84b0d731-5837-408e-9703-fff62acf4428", "eventTime": "2018-08-05T17:16:11Z", "eventName": "ListStackResources", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a11473f-937f-4723-a548-ee00e1d87e9a", "record_id": "flaws_cloudtrail:0000236:a11473f-937f-4723-a548-ee00e1d87e9a", "row_index": 236, "timestamp": "2018-08-05T17:16:11Z", "event_type": "ListChangeSets", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a11473f-937f-4723-a548-ee00e1d87e9a", "eventTime": "2018-08-05T17:16:11Z", "eventName": "ListChangeSets", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6245a2b0-3883-45f2-9569-b363f255a676", "record_id": "flaws_cloudtrail:0000237:6245a2b0-3883-45f2-9569-b363f255a676", "row_index": 237, "timestamp": "2018-08-05T17:16:12Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6245a2b0-3883-45f2-9569-b363f255a676", "eventTime": "2018-08-05T17:16:12Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c909cd26-9040-4547-8d43-33ab91793", "record_id": "flaws_cloudtrail:0000238:c909cd26-9040-4547-8d43-33ab91793", "row_index": 238, "timestamp": "2018-08-05T17:17:12Z", "event_type": "DescribeStackEvents", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c909cd26-9040-4547-8d43-33ab91793", "eventTime": "2018-08-05T17:17:12Z", "eventName": "DescribeStackEvents", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db851bad-ca81-468c-97d5-feaaa9dadc87", "record_id": "flaws_cloudtrail:0000239:db851bad-ca81-468c-97d5-feaaa9dadc87", "row_index": 239, "timestamp": "2018-08-05T17:17:12Z", "event_type": "ListStackResources", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db851bad-ca81-468c-97d5-feaaa9dadc87", "eventTime": "2018-08-05T17:17:12Z", "eventName": "ListStackResources", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b825f7a7-9ccf-4ce4-b380-3f1e8255d173", "record_id": "flaws_cloudtrail:0000240:b825f7a7-9ccf-4ce4-b380-3f1e8255d173", "row_index": 240, "timestamp": "2018-08-05T17:17:12Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b825f7a7-9ccf-4ce4-b380-3f1e8255d173", "eventTime": "2018-08-05T17:17:12Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ae9b3fe-be24-4ab0-a1d3-0778e96f0d65", "record_id": "flaws_cloudtrail:0000241:1ae9b3fe-be24-4ab0-a1d3-0778e96f0d65", "row_index": 241, "timestamp": "2018-08-05T17:17:12Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ae9b3fe-be24-4ab0-a1d3-0778e96f0d65", "eventTime": "2018-08-05T17:17:12Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8f69f0d-a419-4420-9fbd-c93341e18d95", "record_id": "flaws_cloudtrail:0000242:a8f69f0d-a419-4420-9fbd-c93341e18d95", "row_index": 242, "timestamp": "2018-08-05T17:17:12Z", "event_type": "ListChangeSets", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8f69f0d-a419-4420-9fbd-c93341e18d95", "eventTime": "2018-08-05T17:17:12Z", "eventName": "ListChangeSets", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "edaa378a-64e2-4338-b73b-4d7cc42e22ec", "record_id": "flaws_cloudtrail:0000243:edaa378a-64e2-4338-b73b-4d7cc42e22ec", "row_index": 243, "timestamp": "2018-08-05T17:18:13Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "edaa378a-64e2-4338-b73b-4d7cc42e22ec", "eventTime": "2018-08-05T17:18:13Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c68d5312-263d-4d72-acb2-90ac625261ec", "record_id": "flaws_cloudtrail:0000244:c68d5312-263d-4d72-acb2-90ac625261ec", "row_index": 244, "timestamp": "2018-08-05T17:18:13Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c68d5312-263d-4d72-acb2-90ac625261ec", "eventTime": "2018-08-05T17:18:13Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77a788e6-6887-42d9-8253-f70105be00", "record_id": "flaws_cloudtrail:0000245:77a788e6-6887-42d9-8253-f70105be00", "row_index": 245, "timestamp": "2018-08-05T17:18:13Z", "event_type": "DescribeStackEvents", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77a788e6-6887-42d9-8253-f70105be00", "eventTime": "2018-08-05T17:18:13Z", "eventName": "DescribeStackEvents", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ee44d77-9272-47b1-9fac-21c5d1208c72", "record_id": "flaws_cloudtrail:0000246:0ee44d77-9272-47b1-9fac-21c5d1208c72", "row_index": 246, "timestamp": "2018-08-05T17:18:13Z", "event_type": "ListChangeSets", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ee44d77-9272-47b1-9fac-21c5d1208c72", "eventTime": "2018-08-05T17:18:13Z", "eventName": "ListChangeSets", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f7403ed-035c-490f-b462-0bdce48fc3c8", "record_id": "flaws_cloudtrail:0000247:0f7403ed-035c-490f-b462-0bdce48fc3c8", "row_index": 247, "timestamp": "2018-08-05T17:18:13Z", "event_type": "ListStackResources", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f7403ed-035c-490f-b462-0bdce48fc3c8", "eventTime": "2018-08-05T17:18:13Z", "eventName": "ListStackResources", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2b623e0-04d8-4eb4-9e1b-b3cef4178076", "record_id": "flaws_cloudtrail:0000248:a2b623e0-04d8-4eb4-9e1b-b3cef4178076", "row_index": 248, "timestamp": "2018-08-05T17:19:13Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2b623e0-04d8-4eb4-9e1b-b3cef4178076", "eventTime": "2018-08-05T17:19:13Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "937877b6-fc0b-4d55-9a6f-64204a8b756e", "record_id": "flaws_cloudtrail:0000249:937877b6-fc0b-4d55-9a6f-64204a8b756e", "row_index": 249, "timestamp": "2018-08-05T17:19:13Z", "event_type": "ListStackResources", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "937877b6-fc0b-4d55-9a6f-64204a8b756e", "eventTime": "2018-08-05T17:19:13Z", "eventName": "ListStackResources", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87b9bf74-ffa2-414d-badb-894de881146b", "record_id": "flaws_cloudtrail:0000250:87b9bf74-ffa2-414d-badb-894de881146b", "row_index": 250, "timestamp": "2018-08-05T17:19:13Z", "event_type": "DescribeStackEvents", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87b9bf74-ffa2-414d-badb-894de881146b", "eventTime": "2018-08-05T17:19:13Z", "eventName": "DescribeStackEvents", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "508da000-7cef-46f5-b89a-1b23ba2b0557", "record_id": "flaws_cloudtrail:0000251:508da000-7cef-46f5-b89a-1b23ba2b0557", "row_index": 251, "timestamp": "2018-08-05T17:19:13Z", "event_type": "ListChangeSets", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "508da000-7cef-46f5-b89a-1b23ba2b0557", "eventTime": "2018-08-05T17:19:13Z", "eventName": "ListChangeSets", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09d5e5fb-2c0a-4188-bbf2-123b22fe8a48", "record_id": "flaws_cloudtrail:0000252:09d5e5fb-2c0a-4188-bbf2-123b22fe8a48", "row_index": 252, "timestamp": "2018-08-05T17:19:14Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09d5e5fb-2c0a-4188-bbf2-123b22fe8a48", "eventTime": "2018-08-05T17:19:14Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d59a0896-b434-4019-a324-a2e3c5426ccb", "record_id": "flaws_cloudtrail:0000253:d59a0896-b434-4019-a324-a2e3c5426ccb", "row_index": 253, "timestamp": "2018-08-05T17:20:14Z", "event_type": "ListStackResources", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d59a0896-b434-4019-a324-a2e3c5426ccb", "eventTime": "2018-08-05T17:20:14Z", "eventName": "ListStackResources", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43612-1b8d-4b2e-9c99-3e03dd21fea0", "record_id": "flaws_cloudtrail:0000254:43612-1b8d-4b2e-9c99-3e03dd21fea0", "row_index": 254, "timestamp": "2018-08-05T17:20:14Z", "event_type": "ListChangeSets", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43612-1b8d-4b2e-9c99-3e03dd21fea0", "eventTime": "2018-08-05T17:20:14Z", "eventName": "ListChangeSets", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4592be09-36ee-4942-8013-d2d66100c4", "record_id": "flaws_cloudtrail:0000255:4592be09-36ee-4942-8013-d2d66100c4", "row_index": 255, "timestamp": "2018-08-05T17:20:14Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 849, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4592be09-36ee-4942-8013-d2d66100c4", "eventTime": "2018-08-05T17:20:14Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3d5c93c-69a3-41fc-97ba-23801b8e7098", "record_id": "flaws_cloudtrail:0000256:e3d5c93c-69a3-41fc-97ba-23801b8e7098", "row_index": 256, "timestamp": "2018-08-05T17:20:14Z", "event_type": "DescribeStackEvents", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3d5c93c-69a3-41fc-97ba-23801b8e7098", "eventTime": "2018-08-05T17:20:14Z", "eventName": "DescribeStackEvents", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee695236-9e98-45b3-9c92-253380c88c3", "record_id": "flaws_cloudtrail:0000257:ee695236-9e98-45b3-9c92-253380c88c3", "row_index": 257, "timestamp": "2018-08-05T17:20:15Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee695236-9e98-45b3-9c92-253380c88c3", "eventTime": "2018-08-05T17:20:15Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7ead962-7f5e-4ab7-8573-4ad30fbffa0b", "record_id": "flaws_cloudtrail:0000258:a7ead962-7f5e-4ab7-8573-4ad30fbffa0b", "row_index": 258, "timestamp": "2018-08-05T17:21:15Z", "event_type": "ListStackResources", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7ead962-7f5e-4ab7-8573-4ad30fbffa0b", "eventTime": "2018-08-05T17:21:15Z", "eventName": "ListStackResources", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10e49559-a7d5-42d9-87bb-d3b403df38cc", "record_id": "flaws_cloudtrail:0000259:10e49559-a7d5-42d9-87bb-d3b403df38cc", "row_index": 259, "timestamp": "2018-08-05T17:21:15Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10e49559-a7d5-42d9-87bb-d3b403df38cc", "eventTime": "2018-08-05T17:21:15Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28583a8a-f1ea-450c-9ad0-9a196536f900", "record_id": "flaws_cloudtrail:0000260:28583a8a-f1ea-450c-9ad0-9a196536f900", "row_index": 260, "timestamp": "2018-08-05T17:21:15Z", "event_type": "DescribeStackEvents", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28583a8a-f1ea-450c-9ad0-9a196536f900", "eventTime": "2018-08-05T17:21:15Z", "eventName": "DescribeStackEvents", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b63152-48a5-45d4-b004-63cdb13aac47", "record_id": "flaws_cloudtrail:0000261:5b63152-48a5-45d4-b004-63cdb13aac47", "row_index": 261, "timestamp": "2018-08-05T17:21:16Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b63152-48a5-45d4-b004-63cdb13aac47", "eventTime": "2018-08-05T17:21:16Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ec00cd3-3e49-46ea-92ab-aacc903a5b2e", "record_id": "flaws_cloudtrail:0000262:9ec00cd3-3e49-46ea-92ab-aacc903a5b2e", "row_index": 262, "timestamp": "2018-08-05T17:21:16Z", "event_type": "ListChangeSets", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ec00cd3-3e49-46ea-92ab-aacc903a5b2e", "eventTime": "2018-08-05T17:21:16Z", "eventName": "ListChangeSets", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b6bb23f-314a-4a5b-b54a-23155cd16036", "record_id": "flaws_cloudtrail:0000263:0b6bb23f-314a-4a5b-b54a-23155cd16036", "row_index": 263, "timestamp": "2018-08-05T17:22:16Z", "event_type": "DescribeStackEvents", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b6bb23f-314a-4a5b-b54a-23155cd16036", "eventTime": "2018-08-05T17:22:16Z", "eventName": "DescribeStackEvents", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e2166f9-0f25-4b54-8478-7a595afaf972", "record_id": "flaws_cloudtrail:0000264:0e2166f9-0f25-4b54-8478-7a595afaf972", "row_index": 264, "timestamp": "2018-08-05T17:22:16Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e2166f9-0f25-4b54-8478-7a595afaf972", "eventTime": "2018-08-05T17:22:16Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "885c4b43-4085-4dbc-a8e4-b828fa983c87", "record_id": "flaws_cloudtrail:0000265:885c4b43-4085-4dbc-a8e4-b828fa983c87", "row_index": 265, "timestamp": "2018-08-05T17:22:16Z", "event_type": "ListChangeSets", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "885c4b43-4085-4dbc-a8e4-b828fa983c87", "eventTime": "2018-08-05T17:22:16Z", "eventName": "ListChangeSets", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d997cd39-4a6d-40a5-9682-514348cb3e9d", "record_id": "flaws_cloudtrail:0000266:d997cd39-4a6d-40a5-9682-514348cb3e9d", "row_index": 266, "timestamp": "2018-08-05T17:22:16Z", "event_type": "ListStackResources", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d997cd39-4a6d-40a5-9682-514348cb3e9d", "eventTime": "2018-08-05T17:22:16Z", "eventName": "ListStackResources", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c2d064a-d209-467f-8cc1-050552e9c508e", "record_id": "flaws_cloudtrail:0000267:7c2d064a-d209-467f-8cc1-050552e9c508e", "row_index": 267, "timestamp": "2018-08-05T17:22:17Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c2d064a-d209-467f-8cc1-050552e9c508e", "eventTime": "2018-08-05T17:22:17Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d7d6d1b-9e6f-44cd-b9f4-aa663e29c36c", "record_id": "flaws_cloudtrail:0000268:4d7d6d1b-9e6f-44cd-b9f4-aa663e29c36c", "row_index": 268, "timestamp": "2018-08-05T17:23:17Z", "event_type": "ListStackResources", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d7d6d1b-9e6f-44cd-b9f4-aa663e29c36c", "eventTime": "2018-08-05T17:23:17Z", "eventName": "ListStackResources", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5889c55c-87e5-4bc9-bf08-1cd5379a5810", "record_id": "flaws_cloudtrail:0000269:5889c55c-87e5-4bc9-bf08-1cd5379a5810", "row_index": 269, "timestamp": "2018-08-05T17:23:17Z", "event_type": "DescribeStackEvents", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5889c55c-87e5-4bc9-bf08-1cd5379a5810", "eventTime": "2018-08-05T17:23:17Z", "eventName": "DescribeStackEvents", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9bd896e-26ea-4063-8ca7-43817a4ea63", "record_id": "flaws_cloudtrail:0000270:e9bd896e-26ea-4063-8ca7-43817a4ea63", "row_index": 270, "timestamp": "2018-08-05T17:23:17Z", "event_type": "ListChangeSets", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9bd896e-26ea-4063-8ca7-43817a4ea63", "eventTime": "2018-08-05T17:23:17Z", "eventName": "ListChangeSets", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e343a86-a20d-4cdb-9f13-d7defb4bab40", "record_id": "flaws_cloudtrail:0000271:4e343a86-a20d-4cdb-9f13-d7defb4bab40", "row_index": 271, "timestamp": "2018-08-05T17:23:17Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e343a86-a20d-4cdb-9f13-d7defb4bab40", "eventTime": "2018-08-05T17:23:17Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12203b39-c4e8-46ac-943b-48615b0cf6a1", "record_id": "flaws_cloudtrail:0000272:12203b39-c4e8-46ac-943b-48615b0cf6a1", "row_index": 272, "timestamp": "2018-08-05T17:23:18Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12203b39-c4e8-46ac-943b-48615b0cf6a1", "eventTime": "2018-08-05T17:23:18Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20efe28d-9506-424a-9abe-046cd04a62eb", "record_id": "flaws_cloudtrail:0000273:20efe28d-9506-424a-9abe-046cd04a62eb", "row_index": 273, "timestamp": "2018-08-05T17:24:18Z", "event_type": "ListStackResources", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20efe28d-9506-424a-9abe-046cd04a62eb", "eventTime": "2018-08-05T17:24:18Z", "eventName": "ListStackResources", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6db2d76e-2213-47f2-b5f4-cfc48b435c1a", "record_id": "flaws_cloudtrail:0000274:6db2d76e-2213-47f2-b5f4-cfc48b435c1a", "row_index": 274, "timestamp": "2018-08-05T17:24:18Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6db2d76e-2213-47f2-b5f4-cfc48b435c1a", "eventTime": "2018-08-05T17:24:18Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45608-2692-4890-b6cb-5d13bfb1d1f3", "record_id": "flaws_cloudtrail:0000275:45608-2692-4890-b6cb-5d13bfb1d1f3", "row_index": 275, "timestamp": "2018-08-05T17:24:18Z", "event_type": "DescribeStackEvents", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45608-2692-4890-b6cb-5d13bfb1d1f3", "eventTime": "2018-08-05T17:24:18Z", "eventName": "DescribeStackEvents", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d857f08-5820-4b0b-a5e9-82060ce74bb4", "record_id": "flaws_cloudtrail:0000276:3d857f08-5820-4b0b-a5e9-82060ce74bb4", "row_index": 276, "timestamp": "2018-08-05T17:24:18Z", "event_type": "ListChangeSets", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d857f08-5820-4b0b-a5e9-82060ce74bb4", "eventTime": "2018-08-05T17:24:18Z", "eventName": "ListChangeSets", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eeb930582-671c-4ba2-8c63-4f3a11979", "record_id": "flaws_cloudtrail:0000277:eeb930582-671c-4ba2-8c63-4f3a11979", "row_index": 277, "timestamp": "2018-08-05T17:24:18Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eeb930582-671c-4ba2-8c63-4f3a11979", "eventTime": "2018-08-05T17:24:18Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ba6fcce-47d0-4dd3-91e4-6797a49e739e", "record_id": "flaws_cloudtrail:0000278:3ba6fcce-47d0-4dd3-91e4-6797a49e739e", "row_index": 278, "timestamp": "2018-08-05T17:25:18Z", "event_type": "ListStackResources", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ba6fcce-47d0-4dd3-91e4-6797a49e739e", "eventTime": "2018-08-05T17:25:18Z", "eventName": "ListStackResources", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "612094-8bbb-46f7-9b77-1798cf58e320", "record_id": "flaws_cloudtrail:0000279:612094-8bbb-46f7-9b77-1798cf58e320", "row_index": 279, "timestamp": "2018-08-05T17:25:18Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "612094-8bbb-46f7-9b77-1798cf58e320", "eventTime": "2018-08-05T17:25:18Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a52324-8397-4c68-939d-463459aac74f", "record_id": "flaws_cloudtrail:0000280:a52324-8397-4c68-939d-463459aac74f", "row_index": 280, "timestamp": "2018-08-05T17:25:18Z", "event_type": "ListChangeSets", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 849, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a52324-8397-4c68-939d-463459aac74f", "eventTime": "2018-08-05T17:25:18Z", "eventName": "ListChangeSets", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44b41d62-3584-4e0a-8f9c-eddbb013f7f1", "record_id": "flaws_cloudtrail:0000281:44b41d62-3584-4e0a-8f9c-eddbb013f7f1", "row_index": 281, "timestamp": "2018-08-05T17:25:18Z", "event_type": "DescribeStackEvents", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44b41d62-3584-4e0a-8f9c-eddbb013f7f1", "eventTime": "2018-08-05T17:25:18Z", "eventName": "DescribeStackEvents", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aae8ef4a-d04b-4784-8dca-04f4596045ea", "record_id": "flaws_cloudtrail:0000282:aae8ef4a-d04b-4784-8dca-04f4596045ea", "row_index": 282, "timestamp": "2018-08-05T17:25:19Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aae8ef4a-d04b-4784-8dca-04f4596045ea", "eventTime": "2018-08-05T17:25:19Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0731d200-29cb-4e66-9329-49136e3a2917", "record_id": "flaws_cloudtrail:0000283:0731d200-29cb-4e66-9329-49136e3a2917", "row_index": 283, "timestamp": "2018-08-05T17:26:19Z", "event_type": "ListChangeSets", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0731d200-29cb-4e66-9329-49136e3a2917", "eventTime": "2018-08-05T17:26:19Z", "eventName": "ListChangeSets", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f169325d3-12c5-4109-8454-ca528969", "record_id": "flaws_cloudtrail:0000284:f169325d3-12c5-4109-8454-ca528969", "row_index": 284, "timestamp": "2018-08-05T17:26:19Z", "event_type": "ListStackResources", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f169325d3-12c5-4109-8454-ca528969", "eventTime": "2018-08-05T17:26:19Z", "eventName": "ListStackResources", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2fb2ff0e-1072-4042-93a4-c2ad55a85e91", "record_id": "flaws_cloudtrail:0000285:2fb2ff0e-1072-4042-93a4-c2ad55a85e91", "row_index": 285, "timestamp": "2018-08-05T17:26:19Z", "event_type": "DescribeStackEvents", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2fb2ff0e-1072-4042-93a4-c2ad55a85e91", "eventTime": "2018-08-05T17:26:19Z", "eventName": "DescribeStackEvents", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72eae77f-a627-41f9-8560-e95e4b47c089", "record_id": "flaws_cloudtrail:0000286:72eae77f-a627-41f9-8560-e95e4b47c089", "row_index": 286, "timestamp": "2018-08-05T17:26:19Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72eae77f-a627-41f9-8560-e95e4b47c089", "eventTime": "2018-08-05T17:26:19Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "460561a6-e8e2-4460-adc7-fa1ceff2f784", "record_id": "flaws_cloudtrail:0000287:460561a6-e8e2-4460-adc7-fa1ceff2f784", "row_index": 287, "timestamp": "2018-08-05T17:26:20Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "460561a6-e8e2-4460-adc7-fa1ceff2f784", "eventTime": "2018-08-05T17:26:20Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0430ae2-cf59-47f3-9a81-41238a2f5bdc", "record_id": "flaws_cloudtrail:0000288:d0430ae2-cf59-47f3-9a81-41238a2f5bdc", "row_index": 288, "timestamp": "2018-08-05T17:27:21Z", "event_type": "ListStackResources", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0430ae2-cf59-47f3-9a81-41238a2f5bdc", "eventTime": "2018-08-05T17:27:21Z", "eventName": "ListStackResources", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16b7691c-62b2-4410-8c4a-70c1a935a1f5", "record_id": "flaws_cloudtrail:0000289:16b7691c-62b2-4410-8c4a-70c1a935a1f5", "row_index": 289, "timestamp": "2018-08-05T17:27:21Z", "event_type": "ListChangeSets", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16b7691c-62b2-4410-8c4a-70c1a935a1f5", "eventTime": "2018-08-05T17:27:21Z", "eventName": "ListChangeSets", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f20a3bd-07ee-4423-8aeb-28b50d0b77da", "record_id": "flaws_cloudtrail:0000290:5f20a3bd-07ee-4423-8aeb-28b50d0b77da", "row_index": 290, "timestamp": "2018-08-05T17:27:21Z", "event_type": "DescribeStackEvents", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f20a3bd-07ee-4423-8aeb-28b50d0b77da", "eventTime": "2018-08-05T17:27:21Z", "eventName": "DescribeStackEvents", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf06c6e9-1ee2-417a-ae01-bdaacb25df22", "record_id": "flaws_cloudtrail:0000291:bf06c6e9-1ee2-417a-ae01-bdaacb25df22", "row_index": 291, "timestamp": "2018-08-05T17:27:21Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf06c6e9-1ee2-417a-ae01-bdaacb25df22", "eventTime": "2018-08-05T17:27:21Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8d6318f-d0a9-4e0b-974d-007225bf4cf9", "record_id": "flaws_cloudtrail:0000292:b8d6318f-d0a9-4e0b-974d-007225bf4cf9", "row_index": 292, "timestamp": "2018-08-05T17:27:21Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8d6318f-d0a9-4e0b-974d-007225bf4cf9", "eventTime": "2018-08-05T17:27:21Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c7004d4-cd86-4a54-b169-274255931585", "record_id": "flaws_cloudtrail:0000293:4c7004d4-cd86-4a54-b169-274255931585", "row_index": 293, "timestamp": "2018-08-05T17:28:21Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c7004d4-cd86-4a54-b169-274255931585", "eventTime": "2018-08-05T17:28:21Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5925d64c-8fae-47a9-91d6-53992e9275", "record_id": "flaws_cloudtrail:0000294:5925d64c-8fae-47a9-91d6-53992e9275", "row_index": 294, "timestamp": "2018-08-05T17:28:21Z", "event_type": "ListStackResources", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5925d64c-8fae-47a9-91d6-53992e9275", "eventTime": "2018-08-05T17:28:21Z", "eventName": "ListStackResources", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65e18dfd-b93a-432f-af2a-e618ffe82931", "record_id": "flaws_cloudtrail:0000295:65e18dfd-b93a-432f-af2a-e618ffe82931", "row_index": 295, "timestamp": "2018-08-05T17:28:21Z", "event_type": "ListChangeSets", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65e18dfd-b93a-432f-af2a-e618ffe82931", "eventTime": "2018-08-05T17:28:21Z", "eventName": "ListChangeSets", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2d5bf7a-e4d8-4734-83a4-dce827b49f15", "record_id": "flaws_cloudtrail:0000296:e2d5bf7a-e4d8-4734-83a4-dce827b49f15", "row_index": 296, "timestamp": "2018-08-05T17:28:21Z", "event_type": "DescribeStackEvents", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2d5bf7a-e4d8-4734-83a4-dce827b49f15", "eventTime": "2018-08-05T17:28:21Z", "eventName": "DescribeStackEvents", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "870e7468-e0d6-4e99-bf68-a3ac7a79e862", "record_id": "flaws_cloudtrail:0000297:870e7468-e0d6-4e99-bf68-a3ac7a79e862", "row_index": 297, "timestamp": "2018-08-05T17:28:22Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "870e7468-e0d6-4e99-bf68-a3ac7a79e862", "eventTime": "2018-08-05T17:28:22Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb7e29b6-3a4d-4a4f-afcb-5cfcabab7e45", "record_id": "flaws_cloudtrail:0000298:eb7e29b6-3a4d-4a4f-afcb-5cfcabab7e45", "row_index": 298, "timestamp": "2018-08-05T17:29:22Z", "event_type": "ListStackResources", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb7e29b6-3a4d-4a4f-afcb-5cfcabab7e45", "eventTime": "2018-08-05T17:29:22Z", "eventName": "ListStackResources", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "782acf53-2984-4ad8-95d4-190949f6b", "record_id": "flaws_cloudtrail:0000299:782acf53-2984-4ad8-95d4-190949f6b", "row_index": 299, "timestamp": "2018-08-05T17:29:22Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "782acf53-2984-4ad8-95d4-190949f6b", "eventTime": "2018-08-05T17:29:22Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1492daca-b6a7-4d11-8b53-91d637421f", "record_id": "flaws_cloudtrail:0000300:1492daca-b6a7-4d11-8b53-91d637421f", "row_index": 300, "timestamp": "2018-08-05T17:29:22Z", "event_type": "DescribeStackEvents", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1492daca-b6a7-4d11-8b53-91d637421f", "eventTime": "2018-08-05T17:29:22Z", "eventName": "DescribeStackEvents", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e33d30db-65dc-40e0-9320-f6e3e9377b6f", "record_id": "flaws_cloudtrail:0000301:e33d30db-65dc-40e0-9320-f6e3e9377b6f", "row_index": 301, "timestamp": "2018-08-05T17:29:23Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e33d30db-65dc-40e0-9320-f6e3e9377b6f", "eventTime": "2018-08-05T17:29:23Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "875ae8f2-bdab-496a-95c1-c162472ec9a48", "record_id": "flaws_cloudtrail:0000302:875ae8f2-bdab-496a-95c1-c162472ec9a48", "row_index": 302, "timestamp": "2018-08-05T17:29:23Z", "event_type": "ListChangeSets", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "875ae8f2-bdab-496a-95c1-c162472ec9a48", "eventTime": "2018-08-05T17:29:23Z", "eventName": "ListChangeSets", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27cfe64b-05cf-4353-825a-9130f2f22623", "record_id": "flaws_cloudtrail:0000303:27cfe64b-05cf-4353-825a-9130f2f22623", "row_index": 303, "timestamp": "2018-08-05T17:30:23Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27cfe64b-05cf-4353-825a-9130f2f22623", "eventTime": "2018-08-05T17:30:23Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d797420fb-4ef9-4e56-8f4b-dba3ddb58c48", "record_id": "flaws_cloudtrail:0000304:d797420fb-4ef9-4e56-8f4b-dba3ddb58c48", "row_index": 304, "timestamp": "2018-08-05T17:30:23Z", "event_type": "ListChangeSets", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d797420fb-4ef9-4e56-8f4b-dba3ddb58c48", "eventTime": "2018-08-05T17:30:23Z", "eventName": "ListChangeSets", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44dd344c-fb24-4d36-a4a8-94202fb63225", "record_id": "flaws_cloudtrail:0000305:44dd344c-fb24-4d36-a4a8-94202fb63225", "row_index": 305, "timestamp": "2018-08-05T17:30:23Z", "event_type": "ListStackResources", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44dd344c-fb24-4d36-a4a8-94202fb63225", "eventTime": "2018-08-05T17:30:23Z", "eventName": "ListStackResources", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f118fecb-6116-4008-9b6b-7fd1bfc565b5", "record_id": "flaws_cloudtrail:0000306:f118fecb-6116-4008-9b6b-7fd1bfc565b5", "row_index": 306, "timestamp": "2018-08-05T17:30:23Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f118fecb-6116-4008-9b6b-7fd1bfc565b5", "eventTime": "2018-08-05T17:30:23Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b8b5e09-5179-4b62-a530-61e791005c2ae", "record_id": "flaws_cloudtrail:0000307:4b8b5e09-5179-4b62-a530-61e791005c2ae", "row_index": 307, "timestamp": "2018-08-05T17:30:23Z", "event_type": "DescribeStackEvents", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b8b5e09-5179-4b62-a530-61e791005c2ae", "eventTime": "2018-08-05T17:30:23Z", "eventName": "DescribeStackEvents", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "827c4f2f-2ab9-409f-b5fb-1c5f53b99555", "record_id": "flaws_cloudtrail:0000308:827c4f2f-2ab9-409f-b5fb-1c5f53b99555", "row_index": 308, "timestamp": "2018-08-05T17:31:23Z", "event_type": "ListStackResources", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "827c4f2f-2ab9-409f-b5fb-1c5f53b99555", "eventTime": "2018-08-05T17:31:23Z", "eventName": "ListStackResources", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea07f3c5-68d1-49ed-af47-20be16f4164b", "record_id": "flaws_cloudtrail:0000309:ea07f3c5-68d1-49ed-af47-20be16f4164b", "row_index": 309, "timestamp": "2018-08-05T17:31:24Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea07f3c5-68d1-49ed-af47-20be16f4164b", "eventTime": "2018-08-05T17:31:24Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ff78079-d594-4e33-acf5-a1a247077b85", "record_id": "flaws_cloudtrail:0000310:8ff78079-d594-4e33-acf5-a1a247077b85", "row_index": 310, "timestamp": "2018-08-05T17:31:24Z", "event_type": "DescribeStackEvents", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ff78079-d594-4e33-acf5-a1a247077b85", "eventTime": "2018-08-05T17:31:24Z", "eventName": "DescribeStackEvents", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e73cf0b5-1629-4eb6-9937-cc23c36eb38d", "record_id": "flaws_cloudtrail:0000311:e73cf0b5-1629-4eb6-9937-cc23c36eb38d", "row_index": 311, "timestamp": "2018-08-05T17:31:24Z", "event_type": "ListChangeSets", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e73cf0b5-1629-4eb6-9937-cc23c36eb38d", "eventTime": "2018-08-05T17:31:24Z", "eventName": "ListChangeSets", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d474c06-da98-47fa-87dc-b765a8a51d63", "record_id": "flaws_cloudtrail:0000312:2d474c06-da98-47fa-87dc-b765a8a51d63", "row_index": 312, "timestamp": "2018-08-05T17:31:24Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIACF0UGMY4WFI0SHMN", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d474c06-da98-47fa-87dc-b765a8a51d63", "eventTime": "2018-08-05T17:31:24Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIACF0UGMY4WFI0SHMN", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"stackName": "arn:aws:cloudformation:us-east-1:811596193553:stack/Summit-Route-security-assessment-access/2101dd70-98d0-11e8-9317-50d5ca6326f2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "324626d08-429e-47cb-aee6-d249c76b1010", "record_id": "flaws_cloudtrail:0000313:324626d08-429e-47cb-aee6-d249c76b1010", "row_index": 313, "timestamp": "2018-08-05T17:32:00Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIA25G7BZQVTJZ190V9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "324626d08-429e-47cb-aee6-d249c76b1010", "eventTime": "2018-08-05T17:32:00Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA25G7BZQVTJZ190V9", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8376b2ea-05c4-4594-85c7-5ceb6d844ea1", "record_id": "flaws_cloudtrail:0000314:8376b2ea-05c4-4594-85c7-5ceb6d844ea1", "row_index": 314, "timestamp": "2018-08-05T17:32:00Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIA25G7BZQVTJZ190V9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8376b2ea-05c4-4594-85c7-5ceb6d844ea1", "eventTime": "2018-08-05T17:32:00Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA25G7BZQVTJZ190V9", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e28d4223-c541-4f04-bdfd-847dda73517c", "record_id": "flaws_cloudtrail:0000315:e28d4223-c541-4f04-bdfd-847dda73517c", "row_index": 315, "timestamp": "2018-08-05T17:32:00Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIA25G7BZQVTJZ190V9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e28d4223-c541-4f04-bdfd-847dda73517c", "eventTime": "2018-08-05T17:32:00Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA25G7BZQVTJZ190V9", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b6939f7-3c46-4cec-b656-7e1dfb7ec037", "record_id": "flaws_cloudtrail:0000316:8b6939f7-3c46-4cec-b656-7e1dfb7ec037", "row_index": 316, "timestamp": "2018-08-05T17:32:00Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIA25G7BZQVTJZ190V9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b6939f7-3c46-4cec-b656-7e1dfb7ec037", "eventTime": "2018-08-05T17:32:00Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA25G7BZQVTJZ190V9", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95ec6935-9e37-4fe0-ac17-95661e4cad0", "record_id": "flaws_cloudtrail:0000317:95ec6935-9e37-4fe0-ac17-95661e4cad0", "row_index": 317, "timestamp": "2018-08-05T17:32:00Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIA25G7BZQVTJZ190V9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95ec6935-9e37-4fe0-ac17-95661e4cad0", "eventTime": "2018-08-05T17:32:00Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA25G7BZQVTJZ190V9", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a7dbeec-e962-405e-b5ef-8e1375686d99", "record_id": "flaws_cloudtrail:0000318:7a7dbeec-e962-405e-b5ef-8e1375686d99", "row_index": 318, "timestamp": "2018-08-05T17:32:01Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIA25G7BZQVTJZ190V9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a7dbeec-e962-405e-b5ef-8e1375686d99", "eventTime": "2018-08-05T17:32:01Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA25G7BZQVTJZ190V9", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a4d97d27-d64e-4c95-82b3-de08f79f0839", "record_id": "flaws_cloudtrail:0000319:a4d97d27-d64e-4c95-82b3-de08f79f0839", "row_index": 319, "timestamp": "2018-08-05T17:32:01Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIA25G7BZQVTJZ190V9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a4d97d27-d64e-4c95-82b3-de08f79f0839", "eventTime": "2018-08-05T17:32:01Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA25G7BZQVTJZ190V9", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56627b-979a-44e6-919c-be615dce84d6", "record_id": "flaws_cloudtrail:0000320:56627b-979a-44e6-919c-be615dce84d6", "row_index": 320, "timestamp": "2018-08-05T17:32:01Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIA25G7BZQVTJZ190V9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56627b-979a-44e6-919c-be615dce84d6", "eventTime": "2018-08-05T17:32:01Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA25G7BZQVTJZ190V9", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea5630fb-b9fb-4197-82d6-2bc92ca791ae", "record_id": "flaws_cloudtrail:0000321:ea5630fb-b9fb-4197-82d6-2bc92ca791ae", "row_index": 321, "timestamp": "2018-08-05T17:32:01Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIA25G7BZQVTJZ190V9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea5630fb-b9fb-4197-82d6-2bc92ca791ae", "eventTime": "2018-08-05T17:32:01Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA25G7BZQVTJZ190V9", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4099d84f-176d-4b38-bdc6-86878e16df6", "record_id": "flaws_cloudtrail:0000322:4099d84f-176d-4b38-bdc6-86878e16df6", "row_index": 322, "timestamp": "2018-08-05T17:32:01Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIA25G7BZQVTJZ190V9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4099d84f-176d-4b38-bdc6-86878e16df6", "eventTime": "2018-08-05T17:32:01Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA25G7BZQVTJZ190V9", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c53843-af83-4264-9429-9f8948c0e135", "record_id": "flaws_cloudtrail:0000323:7c53843-af83-4264-9429-9f8948c0e135", "row_index": 323, "timestamp": "2018-08-05T17:32:18Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIA25G7BZQVTJZ190V9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c53843-af83-4264-9429-9f8948c0e135", "eventTime": "2018-08-05T17:32:18Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA25G7BZQVTJZ190V9", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d89fc6a-ea41-4b4e-a783-7d850ef9b26e", "record_id": "flaws_cloudtrail:0000324:1d89fc6a-ea41-4b4e-a783-7d850ef9b26e", "row_index": 324, "timestamp": "2018-08-05T17:32:18Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIA25G7BZQVTJZ190V9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d89fc6a-ea41-4b4e-a783-7d850ef9b26e", "eventTime": "2018-08-05T17:32:18Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA25G7BZQVTJZ190V9", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "909082b8d-3a4d-42e6-92e7-d55a600975b", "record_id": "flaws_cloudtrail:0000325:909082b8d-3a4d-42e6-92e7-d55a600975b", "row_index": 325, "timestamp": "2018-08-05T17:32:18Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIA25G7BZQVTJZ190V9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "909082b8d-3a4d-42e6-92e7-d55a600975b", "eventTime": "2018-08-05T17:32:18Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA25G7BZQVTJZ190V9", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac395a29-f608-4b2c-a231-2bb80e8f327b", "record_id": "flaws_cloudtrail:0000326:ac395a29-f608-4b2c-a231-2bb80e8f327b", "row_index": 326, "timestamp": "2018-08-05T17:32:18Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIA25G7BZQVTJZ190V9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac395a29-f608-4b2c-a231-2bb80e8f327b", "eventTime": "2018-08-05T17:32:18Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA25G7BZQVTJZ190V9", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa4e25e6-2d86-45ec-99e8-8b8ad770906ed", "record_id": "flaws_cloudtrail:0000327:aa4e25e6-2d86-45ec-99e8-8b8ad770906ed", "row_index": 327, "timestamp": "2018-08-05T17:32:18Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIA25G7BZQVTJZ190V9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa4e25e6-2d86-45ec-99e8-8b8ad770906ed", "eventTime": "2018-08-05T17:32:18Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA25G7BZQVTJZ190V9", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4754a61f-7e3e-4261-9ab6-a7e9e1c076a7", "record_id": "flaws_cloudtrail:0000328:4754a61f-7e3e-4261-9ab6-a7e9e1c076a7", "row_index": 328, "timestamp": "2018-08-05T17:32:18Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIA25G7BZQVTJZ190V9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4754a61f-7e3e-4261-9ab6-a7e9e1c076a7", "eventTime": "2018-08-05T17:32:18Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA25G7BZQVTJZ190V9", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36bcb6d6-9e42-4cd3-8301-7e05ba17809f", "record_id": "flaws_cloudtrail:0000329:36bcb6d6-9e42-4cd3-8301-7e05ba17809f", "row_index": 329, "timestamp": "2018-08-05T17:32:18Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIA25G7BZQVTJZ190V9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36bcb6d6-9e42-4cd3-8301-7e05ba17809f", "eventTime": "2018-08-05T17:32:18Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA25G7BZQVTJZ190V9", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7242c4f9-313c-46cc-8a9a-18715290680b", "record_id": "flaws_cloudtrail:0000330:7242c4f9-313c-46cc-8a9a-18715290680b", "row_index": 330, "timestamp": "2018-08-05T17:32:19Z", "event_type": "ListSigningCertificates", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIA25G7BZQVTJZ190V9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7242c4f9-313c-46cc-8a9a-18715290680b", "eventTime": "2018-08-05T17:32:19Z", "eventName": "ListSigningCertificates", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA25G7BZQVTJZ190V9", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d9e0b8b-7dd6-47f2-bbeb-796336654eb0", "record_id": "flaws_cloudtrail:0000331:0d9e0b8b-7dd6-47f2-bbeb-796336654eb0", "row_index": 331, "timestamp": "2018-08-05T17:32:19Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIA25G7BZQVTJZ190V9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d9e0b8b-7dd6-47f2-bbeb-796336654eb0", "eventTime": "2018-08-05T17:32:19Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA25G7BZQVTJZ190V9", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2743a74a-5069-4034-90a4-a4be1c23fe7a", "record_id": "flaws_cloudtrail:0000332:2743a74a-5069-4034-90a4-a4be1c23fe7a", "row_index": 332, "timestamp": "2018-08-05T17:32:19Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIA25G7BZQVTJZ190V9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2743a74a-5069-4034-90a4-a4be1c23fe7a", "eventTime": "2018-08-05T17:32:19Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA25G7BZQVTJZ190V9", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b6e671d-2a39-4089-a6f6-c3eb61c4a48b", "record_id": "flaws_cloudtrail:0000333:9b6e671d-2a39-4089-a6f6-c3eb61c4a48b", "row_index": 333, "timestamp": "2018-08-05T17:32:19Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIA25G7BZQVTJZ190V9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b6e671d-2a39-4089-a6f6-c3eb61c4a48b", "eventTime": "2018-08-05T17:32:19Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA25G7BZQVTJZ190V9", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e5b621b-5f6e-4bc0-9ffc-e543da1fe71f", "record_id": "flaws_cloudtrail:0000334:3e5b621b-5f6e-4bc0-9ffc-e543da1fe71f", "row_index": 334, "timestamp": "2018-08-05T17:32:19Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIA25G7BZQVTJZ190V9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e5b621b-5f6e-4bc0-9ffc-e543da1fe71f", "eventTime": "2018-08-05T17:32:19Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA25G7BZQVTJZ190V9", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e912b9de-5e20-4267-a49a-a4eadde6d292", "record_id": "flaws_cloudtrail:0000335:e912b9de-5e20-4267-a49a-a4eadde6d292", "row_index": 335, "timestamp": "2018-08-05T17:32:33Z", "event_type": "DeleteAccessKey", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIA25G7BZQVTJZ190V9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e912b9de-5e20-4267-a49a-a4eadde6d292", "eventTime": "2018-08-05T17:32:33Z", "eventName": "DeleteAccessKey", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA25G7BZQVTJZ190V9", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "requestParameters": {"accessKeyId": "AKIAKZ5DMM2L61KYGILK"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5c3faf4-7c15-45d1-b671-84f465aed1bc", "record_id": "flaws_cloudtrail:0000336:c5c3faf4-7c15-45d1-b671-84f465aed1bc", "row_index": 336, "timestamp": "2018-08-05T17:35:33Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSAccount", "arn": null, "account_id": "369072737419", "principal_id": "AIDASO0WDNC3GCQUJIYAZ", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "aws-sdk-go/1.4.14 (go1.9.2; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SummitRouteAudit"], "raw_record_size_bytes": 1503, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5c3faf4-7c15-45d1-b671-84f465aed1bc", "eventTime": "2018-08-05T17:35:33Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "aws-sdk-go/1.4.14 (go1.9.2; darwin; amd64)", "awsRegion": "us-east-1", "userIdentity": {"type": "AWSAccount", "principalId": "AIDASO0WDNC3GCQUJIYAZ", "accountId": "369072737419"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "roleSessionName": "8741268665290826886", "durationSeconds": 900}, "responseElements": {"credentials": {"accessKeyId": "ASIAQOGCIRLHNQ3U52Y8", "expiration": "Aug 5, 2018 5:50:33 PM", "sessionToken": "FQoGZXIvYXdzEIP//////////wEaDHBUXThRMWs94D44rSL7AY0pvrVvI0UUjPDGKlNBlCUj12zOvRE3HOlcCD98x4/Xz3mAkGuI728fmyk0FdorW7pBVG714hGK7kJrb0aNYrT5dwOZiRIVOVq+r8mwcOvGVkI/2ad8WybnGctFJdxcNenC2fYAXVQKqx4pAHdfvZGfnvx9TBSr3Hb5X/ss+uYKlmpE2dKujO5/hbQLb1GGiuSvY+uezyw0UktDBFBnWSv5UC3ipy0rB14iUtd6jbtgBCzAD1qOF5ESxPZWWTpHIu7+6x3hPM5O7DY19CNY+LV7OA2UWsvyKg8HkOzy3w0Ba4gsx0v8M4O/2QklQ4F9GZZZxYUgiW984zUpKOXqnNsF"}, "assumedRoleUser": {"assumedRoleId": "AROAMY611GPC0EPB1P0F9:8741268665290826886", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/8741268665290826886"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df5ea910-55fc-421d-875b-15282f75f351", "record_id": "flaws_cloudtrail:0000337:df5ea910-55fc-421d-875b-15282f75f351", "row_index": 337, "timestamp": "2018-08-05T17:35:34Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/8741268665290826886", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:8741268665290826886", "user_name": null, "access_key_id": "ASIAQOGCIRLHNQ3U52Y8", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "aws-cli/1.14.66 Python/2.7.10 Darwin/17.6.0 botocore/1.9.19", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1194, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df5ea910-55fc-421d-875b-15282f75f351", "eventTime": "2018-08-05T17:35:34Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "aws-cli/1.14.66 Python/2.7.10 Darwin/17.6.0 botocore/1.9.19", "awsRegion": "us-east-1", "errorCode": "Client.InvalidSnapshot.NotFound", "errorMessage": "The snapshot 'snap-83d15d668fb2941db' does not exist.", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:8741268665290826886", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/8741268665290826886", "accountId": "811596193553", "accessKeyId": "ASIAQOGCIRLHNQ3U52Y8", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:35:33Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f8a9b0a-7c5f-4436-9482-d7db228c58e0", "record_id": "flaws_cloudtrail:0000338:1f8a9b0a-7c5f-4436-9482-d7db228c58e0", "row_index": 338, "timestamp": "2018-08-05T17:36:10Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSAccount", "arn": null, "account_id": "369072737419", "principal_id": "AIDASO0WDNC3GCQUJIYAZ", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "aws-sdk-go/1.4.14 (go1.9.2; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SummitRouteAudit"], "raw_record_size_bytes": 1503, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f8a9b0a-7c5f-4436-9482-d7db228c58e0", "eventTime": "2018-08-05T17:36:10Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "aws-sdk-go/1.4.14 (go1.9.2; darwin; amd64)", "awsRegion": "us-east-1", "userIdentity": {"type": "AWSAccount", "principalId": "AIDASO0WDNC3GCQUJIYAZ", "accountId": "369072737419"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "roleSessionName": "9443307416876921716", "durationSeconds": 900}, "responseElements": {"credentials": {"accessKeyId": "ASIABE5KBRWL3W1LVZJ2", "expiration": "Aug 5, 2018 5:51:10 PM", "sessionToken": "FQoGZXIvYXdzEIP//////////wEaDAXeCzYzTWATrtT/cSL7ARN6308QI5f8jFd+KLpFnC6zdxWZp4odr2qRLIlACCv+tHfG3vrNSCBSiTLj6CVRRN9ivHCiMytW8qEwRCMy/r/np3W0W2Mf/7TZg7yb/S2qDjspHc3712VM4eXJ5CXwYn7piiJhCg5PD5DaiNtZ2Ho/B+UzZxM9ga9bSX8vferY+fqUsIkL6oxRa6FZzK1kfo6glreifsELv8ChIqrP06Ds7r0i9wxJqUWbvrlLlLTzsZO2vkDjOMKrm8nXj0eXdCZhUrsbMHh8icOBFbKas0918akYGAtoW2V182+Dr067LDj466UcBueoEtWUmTd6Wo4CE3UcvWHmMUK8KIrrnNsF"}, "assumedRoleUser": {"assumedRoleId": "AROAMY611GPC0EPB1P0F9:9443307416876921716", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/9443307416876921716"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17af7ab6-dc01-44bd-9d28-fda1c1438b48", "record_id": "flaws_cloudtrail:0000339:17af7ab6-dc01-44bd-9d28-fda1c1438b48", "row_index": 339, "timestamp": "2018-08-05T17:36:11Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/9443307416876921716", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:9443307416876921716", "user_name": null, "access_key_id": "ASIABE5KBRWL3W1LVZJ2", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "aws-cli/1.14.66 Python/2.7.10 Darwin/17.6.0 botocore/1.9.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1077, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17af7ab6-dc01-44bd-9d28-fda1c1438b48", "eventTime": "2018-08-05T17:36:11Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "aws-cli/1.14.66 Python/2.7.10 Darwin/17.6.0 botocore/1.9.19", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:9443307416876921716", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/9443307416876921716", "accountId": "811596193553", "accessKeyId": "ASIABE5KBRWL3W1LVZJ2", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T17:36:10Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3089aa10-2802-4221-9b02-1e0afc03aaf9", "record_id": "flaws_cloudtrail:0000340:3089aa10-2802-4221-9b02-1e0afc03aaf9", "row_index": 340, "timestamp": "2018-08-05T17:43:45Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1945, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3089aa10-2802-4221-9b02-1e0afc03aaf9", "eventTime": "2018-08-05T17:43:45Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIA25VEAG1IFK50G2HC", "expiration": "Aug 5, 2018 6:43:45 PM", "sessionToken": "AgoGb3JpZ2luEMX//////////wEaCXVzLXdlc3QtMiKAAo9Gg2M5PkXEsC9ps0e8GLP3KKTwxzGsk0PUblm9qlxfTXLMX5F2ybvtGBIFhIdQy0V9Qgw/fgrw0kMFOpXmDgiPmbRffVIJGE1Ya8QYMLC5XBGqyjxUtJojo5YQmlBuF3ICLDLvoHiBcnrBRPuMr4gysYwNQ4LDmb1sv77h7ebrGuzCGT3moXVkQevyNEsyMno8unAWDZpuKX0U4ZIbWRoy0VqKS2+688VipCn4VAitsFZiMSj0/CZywuFa8w+5UY3lcIQ/y1uLrigyX+Wvu97fJZR2GoTJTOH3PQzcHg6TDVlSeNNR3hcUMMU2aXKN9jEuxLdBeQk/TUC5i5+R9Sgq8QIIq///////////ARAAGgw5NzU0MjYyNjIwMjkiDLJM5OECyYBgB8zoZSrFAgbD3byAPPBUTrHcNblm6IuS16/QMaDT7he9O8ntJ+7/oceR6cwEhux+W0/oRMu5rWj5YLS4EAf4MO7q1QGQ/wTj+MCgGMBwZLnlz0sFwpebZp9ZvU313R1HcQjg5v9YDUzBxm7cIRwDbd2X3V3W5ESuEXUBiPTk3uy1KnkoaFf59LVCb04myqT0Okch1TsCVBikHyDRVyvdxqAQaU3iGvARFWW+hYfY3CWlyfVxkvtZADtAlrtdbkyO6wPjp++gD2rLHffcOm4iQ+srx7j5OeGZzcDhmFhvTKRhspwAV7ii2XR8q8Gvp0cwfMQig1fxteMp1tynzTtSWwYE8y9a2AaAgCB6C2LV1daJaICocWHONPi3NJRnXNVqVUnj32YQBEerk4kt0kA4v3UTpdfvSw+Ct3B350/+Jc8oXiPYyykW0v5Zgfkw0e6c2wU="}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f6cb4a9-a561-4ea5-a683-ccf917b57ec8", "record_id": "flaws_cloudtrail:0000341:0f6cb4a9-a561-4ea5-a683-ccf917b57ec8", "row_index": 341, "timestamp": "2018-08-05T18:11:53Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1494, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f6cb4a9-a561-4ea5-a683-ccf917b57ec8", "eventTime": "2018-08-05T18:11:53Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAXHZ784NABB49H2CN", "expiration": "Aug 6, 2018 12:19:44 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e02b4253-073f-4e6a-aebc-fee11509a3f0", "record_id": "flaws_cloudtrail:0000342:e02b4253-073f-4e6a-aebc-fee11509a3f0", "row_index": 342, "timestamp": "2018-08-05T19:11:53Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1491, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e02b4253-073f-4e6a-aebc-fee11509a3f0", "eventTime": "2018-08-05T19:11:53Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAN2UOH61NLIR7WFQ7", "expiration": "Aug 6, 2018 1:14:59 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87a2d3a0-d1ac-4776-8004-00ae3431fcb0", "record_id": "flaws_cloudtrail:0000343:87a2d3a0-d1ac-4776-8004-00ae3431fcb0", "row_index": 343, "timestamp": "2018-08-05T19:13:25Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSAccount", "arn": null, "account_id": "369072737419", "principal_id": "AIDASO0WDNC3GCQUJIYAZ", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "aws-sdk-go/1.4.14 (go1.9.2; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SummitRouteAudit"], "raw_record_size_bytes": 1500, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87a2d3a0-d1ac-4776-8004-00ae3431fcb0", "eventTime": "2018-08-05T19:13:25Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "aws-sdk-go/1.4.14 (go1.9.2; darwin; amd64)", "awsRegion": "us-east-1", "userIdentity": {"type": "AWSAccount", "principalId": "AIDASO0WDNC3GCQUJIYAZ", "accountId": "369072737419"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "roleSessionName": "9654723669612188222", "durationSeconds": 900}, "responseElements": {"credentials": {"accessKeyId": "ASIA9TG2LTWVJ0AKUC29", "expiration": "Aug 5, 2018 7:28:25 PM", "sessionToken": "FQoGZXIvYXdzEIX//////////wEaDLyH9aIdEeaVIP55GyL7AWL5p6Iw0/6pNpxoQ1I/9FOZbEhgUXEWWRGf/CoXDZWNyAX47Q6EJl12dGn4nw6k8jZbU9yM/hQzSGsXn9iA4n/ZqXum0bYbvjT1yvvnJk6/+ZBU0KKjn+1WQNKXbwTddUkCaZ6iWqias4tiU2UdsSHmN+ITplvEMG75RA5TjRDp/BAQ8E5XPIAg/Dkg2CAyzn/bthWV3mSg5QdR3XMTeQuHU8bYF2nm6RookBBe04lA5sIRdda4rS9tmvpLEToV/BIvLR8DCV8k1o/KDa46ZgwY4sQTw2XBLl5S4Gh9Aw/gTxjuqCaBEV4uRond3HtzZ4+tbRdRLbPOmsbsKNWYndsF"}, "assumedRoleUser": {"assumedRoleId": "AROAMY611GPC0EPB1P0F9:9654723669612188222", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/9654723669612188222"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "872012f2f-673f-4857-8674-32b8e6f9e401", "record_id": "flaws_cloudtrail:0000344:872012f2f-673f-4857-8674-32b8e6f9e401", "row_index": 344, "timestamp": "2018-08-05T19:13:26Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/9654723669612188222", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:9654723669612188222", "user_name": null, "access_key_id": "ASIA9TG2LTWVJ0AKUC29", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "872012f2f-673f-4857-8674-32b8e6f9e401", "eventTime": "2018-08-05T19:13:26Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-east-1", "errorCode": "ValidationException", "errorMessage": "An unknown error occurred", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:9654723669612188222", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/9654723669612188222", "accountId": "811596193553", "accessKeyId": "ASIA9TG2LTWVJ0AKUC29", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T19:13:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1f4f593-41b6-4cd5-933d-ea70d4b3a424", "record_id": "flaws_cloudtrail:0000345:a1f4f593-41b6-4cd5-933d-ea70d4b3a424", "row_index": 345, "timestamp": "2018-08-05T19:14:10Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSAccount", "arn": null, "account_id": "369072737419", "principal_id": "AIDASO0WDNC3GCQUJIYAZ", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "aws-sdk-go/1.4.14 (go1.9.2; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SummitRouteAudit"], "raw_record_size_bytes": 1501, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1f4f593-41b6-4cd5-933d-ea70d4b3a424", "eventTime": "2018-08-05T19:14:10Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "aws-sdk-go/1.4.14 (go1.9.2; darwin; amd64)", "awsRegion": "us-east-1", "userIdentity": {"type": "AWSAccount", "principalId": "AIDASO0WDNC3GCQUJIYAZ", "accountId": "369072737419"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "roleSessionName": "5456111205804991766", "durationSeconds": 900}, "responseElements": {"credentials": {"accessKeyId": "ASIAG9MDHADPN381E308", "expiration": "Aug 5, 2018 7:29:10 PM", "sessionToken": "FQoGZXIvYXdzEIX//////////wEaDChDz05SHLQ8C+J0RCL7AUfWL8p3Ixg92Ea7GwSFKU7iP2IXTvUiwgQwpH1rAXDQKDxG2yEh0fHIhmKGRPj2SBud+G4TV9DUGq5wjr3I7bh2i51A+wO9vZhSveECCEOq14S2F95gSRSN8KABEEPyBvjCLZymtvR4P8OyTaNoR/0pauVtogDvwnQ3DT9d76CqLdGDL8gAlus/jvGq5w1qKalQkL0w5Sdl5oUlp/eP0q/wVnWoHmtxvC9P72OD3ZuBVVYr1NKj45SeAI3JHNIP1NqJxmFKgN4Yq+79lGdu/m9L8PcjCW+usuPpY/RXIH9CWLag8NKU3iMrJ/xHy6b17nqshYQ0OcCX5JoIKIKZndsF"}, "assumedRoleUser": {"assumedRoleId": "AROAMY611GPC0EPB1P0F9:5456111205804991766", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/5456111205804991766"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c963d2dd-ca64-40e5-9e18-6b1d27cf875b", "record_id": "flaws_cloudtrail:0000346:c963d2dd-ca64-40e5-9e18-6b1d27cf875b", "row_index": 346, "timestamp": "2018-08-05T19:14:11Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/5456111205804991766", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:5456111205804991766", "user_name": null, "access_key_id": "ASIAG9MDHADPN381E308", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c963d2dd-ca64-40e5-9e18-6b1d27cf875b", "eventTime": "2018-08-05T19:14:11Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The user with name test cannot be found.", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:5456111205804991766", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/5456111205804991766", "accountId": "811596193553", "accessKeyId": "ASIAG9MDHADPN381E308", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T19:14:10Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"userName": "test"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70514e2-6902-4866-b860-ce4f294aba99", "record_id": "flaws_cloudtrail:0000347:70514e2-6902-4866-b860-ce4f294aba99", "row_index": 347, "timestamp": "2018-08-05T19:14:31Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/3423657697480834564", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:3423657697480834564", "user_name": null, "access_key_id": "ASIAOQ8S5FHE9XLUK6A1", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70514e2-6902-4866-b860-ce4f294aba99", "eventTime": "2018-08-05T19:14:31Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The user with name test cannot be found.", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:3423657697480834564", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/3423657697480834564", "accountId": "811596193553", "accessKeyId": "ASIAOQ8S5FHE9XLUK6A1", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T19:14:31Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"userName": "test"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4dce06f5-625b-4cde-9c2b-674b53a9ab24", "record_id": "flaws_cloudtrail:0000348:4dce06f5-625b-4cde-9c2b-674b53a9ab24", "row_index": 348, "timestamp": "2018-08-05T19:14:31Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSAccount", "arn": null, "account_id": "369072737419", "principal_id": "AIDASO0WDNC3GCQUJIYAZ", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "aws-sdk-go/1.4.14 (go1.9.2; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SummitRouteAudit"], "raw_record_size_bytes": 1503, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4dce06f5-625b-4cde-9c2b-674b53a9ab24", "eventTime": "2018-08-05T19:14:31Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "aws-sdk-go/1.4.14 (go1.9.2; darwin; amd64)", "awsRegion": "us-east-1", "userIdentity": {"type": "AWSAccount", "principalId": "AIDASO0WDNC3GCQUJIYAZ", "accountId": "369072737419"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "roleSessionName": "3423657697480834564", "durationSeconds": 900}, "responseElements": {"credentials": {"accessKeyId": "ASIAOQ8S5FHE9XLUK6A1", "expiration": "Aug 5, 2018 7:29:31 PM", "sessionToken": "FQoGZXIvYXdzEIX//////////wEaDCRjqm4l1Mexb07wUSL7AWiLELvgaaqySGDlPi67RoJIhJkEaP7uhliUkdLLfHWwwHKV7jABd7rPKnJ1/dfzSzm2oLhATLPVkl9q5Nwxv6NWcKhhRNql7gbtLosp/J3Z3NNl47ZQzN7676cmxTXuAlUTKOrSuqjQxMoSEJNmKu7q2Bf8B1/CoPYEPHrwZMQVjErJp/6ycwf9L7jUczK5lqT/dwHjz1q0UVD0PHIkOixX1u7HTb5eDbqVJFdN3eP5s59DFHqqZqHfp5xpP5kWK3rfxLAw/GMnr6Iagek4fvUBKK3NxzAemebNfBOsVdpF+y+YLULz8yO9UIE3Fp1yQVKs0OrVYKVBN179KJeZndsF"}, "assumedRoleUser": {"assumedRoleId": "AROAMY611GPC0EPB1P0F9:3423657697480834564", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/3423657697480834564"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b8b60df-9a9f-4d8e-9a34-fad543bab312", "record_id": "flaws_cloudtrail:0000349:6b8b60df-9a9f-4d8e-9a34-fad543bab312", "row_index": 349, "timestamp": "2018-08-05T19:14:32Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/3423657697480834564", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:3423657697480834564", "user_name": null, "access_key_id": "ASIAOQ8S5FHE9XLUK6A1", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 997, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b8b60df-9a9f-4d8e-9a34-fad543bab312", "eventTime": "2018-08-05T19:14:32Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:3423657697480834564", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/3423657697480834564", "accountId": "811596193553", "accessKeyId": "ASIAOQ8S5FHE9XLUK6A1", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T19:14:31Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63dad6a0-b68b-45c4-8909-eb71778d2d4", "record_id": "flaws_cloudtrail:0000350:63dad6a0-b68b-45c4-8909-eb71778d2d4", "row_index": 350, "timestamp": "2018-08-05T19:15:17Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSAccount", "arn": null, "account_id": "369072737419", "principal_id": "AIDASO0WDNC3GCQUJIYAZ", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "aws-sdk-go/1.4.14 (go1.9.2; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SummitRouteAudit"], "raw_record_size_bytes": 1502, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63dad6a0-b68b-45c4-8909-eb71778d2d4", "eventTime": "2018-08-05T19:15:17Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "aws-sdk-go/1.4.14 (go1.9.2; darwin; amd64)", "awsRegion": "us-east-1", "userIdentity": {"type": "AWSAccount", "principalId": "AIDASO0WDNC3GCQUJIYAZ", "accountId": "369072737419"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "roleSessionName": "4180687345654446179", "durationSeconds": 900}, "responseElements": {"credentials": {"accessKeyId": "ASIAWO6CAI0VN50Y3NHT", "expiration": "Aug 5, 2018 7:30:17 PM", "sessionToken": "FQoGZXIvYXdzEIX//////////wEaDAuTx+lDabxfdaKMDSL7AeHgI5F2b5bol7twolZ/EvsHZJTRrjxVGL5d2uh/ezy0D62xP8UzpJjUtL06uALFA5qTKerxuK9x1pOlvtYUbo9QYxb4wJMgYpgHaQIVp9zhYDHiDjV5moGQ26xGr0zB9+KdJO/U1RzNpjZHQ2ArBfar8ooGGAz8/Xx8aFoBL11EFHLrb5SlCqe5eIsmB6MoA1dwxQBHjvUy4kHLHoWSPRAO7OJmdINAlz6qbn8CW4IGl1vnZHpqT0W+WIzkeOLm0mzeXJ6752qwDM8vpNQjHAtEQbO2BaK8X/Gk9k/x8gnCnWJgm0/ZqQ7LNHPTEHzeGkzWdbyDv5OHrhXIKMWZndsF"}, "assumedRoleUser": {"assumedRoleId": "AROAMY611GPC0EPB1P0F9:4180687345654446179", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4180687345654446179"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df2bcc31-11ba-4998-8728-67a870dad522", "record_id": "flaws_cloudtrail:0000351:df2bcc31-11ba-4998-8728-67a870dad522", "row_index": 351, "timestamp": "2018-08-05T19:15:18Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4180687345654446179", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4180687345654446179", "user_name": null, "access_key_id": "ASIAWO6CAI0VN50Y3NHT", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df2bcc31-11ba-4998-8728-67a870dad522", "eventTime": "2018-08-05T19:15:18Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The user with name test cannot be found.", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4180687345654446179", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4180687345654446179", "accountId": "811596193553", "accessKeyId": "ASIAWO6CAI0VN50Y3NHT", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T19:15:17Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"userName": "test"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f68e4de1-4d40-446e-a58b-5ba3bbf3bde7", "record_id": "flaws_cloudtrail:0000352:f68e4de1-4d40-446e-a58b-5ba3bbf3bde7", "row_index": 352, "timestamp": "2018-08-05T19:15:19Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4180687345654446179", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4180687345654446179", "user_name": null, "access_key_id": "ASIAWO6CAI0VN50Y3NHT", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 997, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f68e4de1-4d40-446e-a58b-5ba3bbf3bde7", "eventTime": "2018-08-05T19:15:19Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4180687345654446179", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4180687345654446179", "accountId": "811596193553", "accessKeyId": "ASIAWO6CAI0VN50Y3NHT", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T19:15:17Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a48f9863-6760-443c-8e61-bf7123a1d868", "record_id": "flaws_cloudtrail:0000353:a48f9863-6760-443c-8e61-bf7123a1d868", "row_index": 353, "timestamp": "2018-08-05T19:17:18Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSAccount", "arn": null, "account_id": "369072737419", "principal_id": "AIDASO0WDNC3GCQUJIYAZ", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "aws-sdk-go/1.4.14 (go1.9.2; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SummitRouteAudit"], "raw_record_size_bytes": 1500, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a48f9863-6760-443c-8e61-bf7123a1d868", "eventTime": "2018-08-05T19:17:18Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "aws-sdk-go/1.4.14 (go1.9.2; darwin; amd64)", "awsRegion": "us-east-1", "userIdentity": {"type": "AWSAccount", "principalId": "AIDASO0WDNC3GCQUJIYAZ", "accountId": "369072737419"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "roleSessionName": "8545373857657773227", "durationSeconds": 900}, "responseElements": {"credentials": {"accessKeyId": "ASIAF6MVQW9WK0F86XAO", "expiration": "Aug 5, 2018 7:32:18 PM", "sessionToken": "FQoGZXIvYXdzEIX//////////wEaDA1u24o1QyIK5CYzUiL7AaMRSKO4qRQ4mO6oRXDluuc3V7Bsj4S5KSOjlzMS5bJWkzM2ix60SLQeu7n93PICVmdDm0ElBBFgvkRVGQAmD6E7zarxQrFbN1W5Shsno0Z16En9A869brFZ+MbBW7EaaAUnFFxRUUaMuw2FWkEjFfNKRFYYZjVYmvQUTL0Vlhl6CIdwcn4ZWT4N4ofvsG9+iSkEPOfSSb/sVHcBDR0xvnqOw4Wkx0Btf3oFBhHiRa/hd11k0g5j1sdVwQAOPsk4Bl0VVq5hbpOapUgs9cb91YgxJXpav8CPG5DeWXYvrnRF/TeOoqChQNH6oCrMs+1MazbnDSETHqYJmZOjKL6andsF"}, "assumedRoleUser": {"assumedRoleId": "AROAMY611GPC0EPB1P0F9:8545373857657773227", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/8545373857657773227"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e3255d8-906a-4a53-bb87-5405e85b9958", "record_id": "flaws_cloudtrail:0000354:9e3255d8-906a-4a53-bb87-5405e85b9958", "row_index": 354, "timestamp": "2018-08-05T19:17:19Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/8545373857657773227", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:8545373857657773227", "user_name": null, "access_key_id": "ASIAF6MVQW9WK0F86XAO", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 997, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e3255d8-906a-4a53-bb87-5405e85b9958", "eventTime": "2018-08-05T19:17:19Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:8545373857657773227", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/8545373857657773227", "accountId": "811596193553", "accessKeyId": "ASIAF6MVQW9WK0F86XAO", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T19:17:18Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a4706cf9-5030-47f2-82a4-99aa709415", "record_id": "flaws_cloudtrail:0000355:a4706cf9-5030-47f2-82a4-99aa709415", "row_index": 355, "timestamp": "2018-08-05T19:17:19Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/8545373857657773227", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:8545373857657773227", "user_name": null, "access_key_id": "ASIAF6MVQW9WK0F86XAO", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a4706cf9-5030-47f2-82a4-99aa709415", "eventTime": "2018-08-05T19:17:19Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The user with name test cannot be found.", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:8545373857657773227", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/8545373857657773227", "accountId": "811596193553", "accessKeyId": "ASIAF6MVQW9WK0F86XAO", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T19:17:18Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"userName": "test"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e079e27-4a29-452f-b83e-bf77ac0712b0", "record_id": "flaws_cloudtrail:0000356:7e079e27-4a29-452f-b83e-bf77ac0712b0", "row_index": 356, "timestamp": "2018-08-05T19:17:22Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/8545373857657773227", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:8545373857657773227", "user_name": null, "access_key_id": "ASIAF6MVQW9WK0F86XAO", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1073, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e079e27-4a29-452f-b83e-bf77ac0712b0", "eventTime": "2018-08-05T19:17:22Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:8545373857657773227", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/8545373857657773227", "accountId": "811596193553", "accessKeyId": "ASIAF6MVQW9WK0F86XAO", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T19:17:18Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03974f-ab16-42d9-9c6f-df18020fff94", "record_id": "flaws_cloudtrail:0000357:03974f-ab16-42d9-9c6f-df18020fff94", "row_index": 357, "timestamp": "2018-08-05T19:17:43Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSAccount", "arn": null, "account_id": "369072737419", "principal_id": "AIDASO0WDNC3GCQUJIYAZ", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "aws-sdk-go/1.4.14 (go1.9.2; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SummitRouteAudit"], "raw_record_size_bytes": 1498, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03974f-ab16-42d9-9c6f-df18020fff94", "eventTime": "2018-08-05T19:17:43Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "aws-sdk-go/1.4.14 (go1.9.2; darwin; amd64)", "awsRegion": "us-east-1", "userIdentity": {"type": "AWSAccount", "principalId": "AIDASO0WDNC3GCQUJIYAZ", "accountId": "369072737419"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "roleSessionName": "7517542300827364070", "durationSeconds": 900}, "responseElements": {"credentials": {"accessKeyId": "ASIAJQXCC8DP5HQJBHQF", "expiration": "Aug 5, 2018 7:32:43 PM", "sessionToken": "FQoGZXIvYXdzEIX//////////wEaDOvofXPgZeSguXlWaiL7AUMDU/GlxcWw1VqOnrR54np3ssX5tNhc4ZpTn/Fq0y13286T9sdFQJHGgvarafnq23cvCJ2kF88cl6TPg30Xc5dBKQalcZBVsiHVZyyOKAFSxmo2jzp88i6j9XaOW3Ii7TKbHLRDnwodqdyegDTGWg3ovUc6ArUTuYx/lqx+ijrKh4B4zWobo8k6tCAmBRcaCZA8tM4Y19EEgdU9LRbhQeyKzlpf6FuA/VImF9UUI4dCU4EZXOQ65Nkc9dnYXr0PnMqqu9cd0rOGrA6A26ptuTYJQEmqKnZHQ61JnTkIWDUCUxjudXeYF3y/qKWiNHZDMnrsNtFxivjSe5TBKNeandsF"}, "assumedRoleUser": {"assumedRoleId": "AROAMY611GPC0EPB1P0F9:7517542300827364070", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/7517542300827364070"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d7b358e-72a7-484e-91c4-9d948e5eaeb0", "record_id": "flaws_cloudtrail:0000358:2d7b358e-72a7-484e-91c4-9d948e5eaeb0", "row_index": 358, "timestamp": "2018-08-05T19:20:29Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSAccount", "arn": null, "account_id": "369072737419", "principal_id": "AIDASO0WDNC3GCQUJIYAZ", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "aws-sdk-go/1.4.14 (go1.9.2; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SummitRouteAudit"], "raw_record_size_bytes": 1503, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d7b358e-72a7-484e-91c4-9d948e5eaeb0", "eventTime": "2018-08-05T19:20:29Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "aws-sdk-go/1.4.14 (go1.9.2; darwin; amd64)", "awsRegion": "us-east-1", "userIdentity": {"type": "AWSAccount", "principalId": "AIDASO0WDNC3GCQUJIYAZ", "accountId": "369072737419"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "roleSessionName": "0398758691357490311", "durationSeconds": 900}, "responseElements": {"credentials": {"accessKeyId": "ASIALY9ZVMCNSOAB87J0", "expiration": "Aug 5, 2018 7:35:29 PM", "sessionToken": "FQoGZXIvYXdzEIX//////////wEaDOU99pd7iH8nieYeMiL7AaWSM3dK3JI6ZG+mljZLcYectrBsZ0GsKxSkuH5KQcY+J6vAiIfuwqBn54Jo61TzUcGdexoK3JB//m5z4Tcfi8BqW1L8L1PqXQXuUG5EyrY6Y1EuwgoO0OKFgNgMdyoRRuGbCDFUx5oXzhlj0eJ3lAPHyWOvY0Xmi2TRUpC4rYjfAVGSlB6hM6oszUQnz/0mwA7pZA7Tc43IMr1ZqG4KlwBOeuLu3loNrBb7O/kAbZI1VNixuvItC+IoT87yovxkpgJQC/5O5IFgWRTtif/9cx3mn0CBKl/CarIYGXhQE08o3Q3rBFkxFVWPhnH6hKoJvnUu161zveLw48a8KP2bndsF"}, "assumedRoleUser": {"assumedRoleId": "AROAMY611GPC0EPB1P0F9:0398758691357490311", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/0398758691357490311"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6bf65b7b-34e2-400a-aa0c-3b5a89f5d999", "record_id": "flaws_cloudtrail:0000359:6bf65b7b-34e2-400a-aa0c-3b5a89f5d999", "row_index": 359, "timestamp": "2018-08-05T19:21:16Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSAccount", "arn": null, "account_id": "369072737419", "principal_id": "AIDASO0WDNC3GCQUJIYAZ", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "aws-sdk-go/1.4.14 (go1.9.2; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SummitRouteAudit"], "raw_record_size_bytes": 1500, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6bf65b7b-34e2-400a-aa0c-3b5a89f5d999", "eventTime": "2018-08-05T19:21:16Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "aws-sdk-go/1.4.14 (go1.9.2; darwin; amd64)", "awsRegion": "us-east-1", "userIdentity": {"type": "AWSAccount", "principalId": "AIDASO0WDNC3GCQUJIYAZ", "accountId": "369072737419"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "roleSessionName": "9389636211826873132", "durationSeconds": 900}, "responseElements": {"credentials": {"accessKeyId": "ASIAUBKGC8RSHOAJULWL", "expiration": "Aug 5, 2018 7:36:16 PM", "sessionToken": "FQoGZXIvYXdzEIX//////////wEaDBGpCJkAnd9D6raAgyL7Ab9NmUdbCJRX1B0MS+Zee0wL97cMYvDd0RGOb12UTYHFq/UBMDL+R/cCTLLUa7STHgKjXuG3arFKiJ8O29VTQ1UsretvAES5vSKqc8+2BEePoIC2EaV9ciRsi2YmHj3RnG3bzWXLDaQFtjAhl0u5tgNLAWfwlMizN3hW2awOswTQwpSXIlW1f9zDbO0ra5Tf6CrjtvIe09ApvHxFm+ewSXw3atliYuKxQ/pJFSk5LvWG8PrxdiJ9xDAZuynKVI5G4e8j12ikU4k8u8pPzwQMcTNXn7r2KEikR6CB43dYxcp3XqoUb7iNZcQ55EV+nRaQsdgq7euOuSszCMWbKKycndsF"}, "assumedRoleUser": {"assumedRoleId": "AROAMY611GPC0EPB1P0F9:9389636211826873132", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/9389636211826873132"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d55ecac-5242-4d1b-a674-9adecff04a51", "record_id": "flaws_cloudtrail:0000360:5d55ecac-5242-4d1b-a674-9adecff04a51", "row_index": 360, "timestamp": "2018-08-05T19:24:40Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSAccount", "arn": null, "account_id": "369072737419", "principal_id": "AIDASO0WDNC3GCQUJIYAZ", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "aws-sdk-go/1.4.14 (go1.9.2; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SummitRouteAudit"], "raw_record_size_bytes": 1501, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d55ecac-5242-4d1b-a674-9adecff04a51", "eventTime": "2018-08-05T19:24:40Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "aws-sdk-go/1.4.14 (go1.9.2; darwin; amd64)", "awsRegion": "us-east-1", "userIdentity": {"type": "AWSAccount", "principalId": "AIDASO0WDNC3GCQUJIYAZ", "accountId": "369072737419"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "roleSessionName": "0345019009072843964", "durationSeconds": 900}, "responseElements": {"credentials": {"accessKeyId": "ASIAHMR0JUYJASW49R4V", "expiration": "Aug 5, 2018 7:39:40 PM", "sessionToken": "FQoGZXIvYXdzEIX//////////wEaDPSVX1MJONKhJJ07mSL7AQZUtezQvQTIanbHiBfnbemId11tXun2CMiFKI+AX3uZHXL0VAUX5Fd2/U3M1he16jkCTavBNGGk2QwVrtstP57ac0o/FGLwHwXFKAAm6R0uQEc20GVa7Wz9AnZ2N+Uer7TpUNQagduo+4YgjUEr1z/jv6NqWTyitoKwnS44AlkNJ6CLZzZ2VBUM8dUiEcsXpHNqdxfqpE21d9+ynd8lGDn8eoThJEaMwyxdEwEqXxe8QlejZYr77dphPOGl1vJBTkeEM98c4l4NS0Ly6sKg//XJ6iK42ANo/1QXS9KDsvM6MOi/9ZKXuy1sMgiJYTPj6WEqE1nkUH2oSAMUKPidndsF"}, "assumedRoleUser": {"assumedRoleId": "AROAMY611GPC0EPB1P0F9:0345019009072843964", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/0345019009072843964"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "098999a9-5e3a-4ca5-a35a-a60edca017ad", "record_id": "flaws_cloudtrail:0000361:098999a9-5e3a-4ca5-a35a-a60edca017ad", "row_index": 361, "timestamp": "2018-08-05T20:11:53Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1493, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "098999a9-5e3a-4ca5-a35a-a60edca017ad", "eventTime": "2018-08-05T20:11:53Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAX8Y9QTC6OVH3DWHU", "expiration": "Aug 6, 2018 2:46:03 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77e05659-5a78-446a-b07d-e890aa27818f", "record_id": "flaws_cloudtrail:0000362:77e05659-5a78-446a-b07d-e890aa27818f", "row_index": 362, "timestamp": "2018-08-05T21:11:53Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1493, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77e05659-5a78-446a-b07d-e890aa27818f", "eventTime": "2018-08-05T21:11:53Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA78J8AV5B0DMJ5774", "expiration": "Aug 6, 2018 3:34:38 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2f0c3af-3b72-4305-9beb-873ecd6a5842", "record_id": "flaws_cloudtrail:0000363:f2f0c3af-3b72-4305-9beb-873ecd6a5842", "row_index": 363, "timestamp": "2018-08-05T21:19:33Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIA25G7BZQVTJZ190V9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2f0c3af-3b72-4305-9beb-873ecd6a5842", "eventTime": "2018-08-05T21:19:33Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA25G7BZQVTJZ190V9", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63ae3ca3-76d9-4757-a6e4-c67c2740d6d7", "record_id": "flaws_cloudtrail:0000364:63ae3ca3-76d9-4757-a6e4-c67c2740d6d7", "row_index": 364, "timestamp": "2018-08-05T21:19:33Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIA25G7BZQVTJZ190V9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63ae3ca3-76d9-4757-a6e4-c67c2740d6d7", "eventTime": "2018-08-05T21:19:33Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA25G7BZQVTJZ190V9", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f4f1dcc-5294-43b5-90ef-0fd7d4f8c8fc", "record_id": "flaws_cloudtrail:0000365:0f4f1dcc-5294-43b5-90ef-0fd7d4f8c8fc", "row_index": 365, "timestamp": "2018-08-05T21:19:33Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIA25G7BZQVTJZ190V9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f4f1dcc-5294-43b5-90ef-0fd7d4f8c8fc", "eventTime": "2018-08-05T21:19:33Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA25G7BZQVTJZ190V9", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6160dc31-9bb1-4722-9137-ea88322cf15e", "record_id": "flaws_cloudtrail:0000366:6160dc31-9bb1-4722-9137-ea88322cf15e", "row_index": 366, "timestamp": "2018-08-05T21:19:33Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIA25G7BZQVTJZ190V9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6160dc31-9bb1-4722-9137-ea88322cf15e", "eventTime": "2018-08-05T21:19:33Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA25G7BZQVTJZ190V9", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86d6a56a-fbb8-4b5f-8366-8c1d4c40ca24", "record_id": "flaws_cloudtrail:0000367:86d6a56a-fbb8-4b5f-8366-8c1d4c40ca24", "row_index": 367, "timestamp": "2018-08-05T21:19:33Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIA25G7BZQVTJZ190V9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86d6a56a-fbb8-4b5f-8366-8c1d4c40ca24", "eventTime": "2018-08-05T21:19:33Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA25G7BZQVTJZ190V9", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "382d6cd5-432c-4517-a362-a00f181691b", "record_id": "flaws_cloudtrail:0000368:382d6cd5-432c-4517-a362-a00f181691b", "row_index": 368, "timestamp": "2018-08-05T21:19:34Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIA25G7BZQVTJZ190V9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "382d6cd5-432c-4517-a362-a00f181691b", "eventTime": "2018-08-05T21:19:34Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA25G7BZQVTJZ190V9", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "424b8d04-6017-42f7-b7bc-e043cbfa4bb0", "record_id": "flaws_cloudtrail:0000369:424b8d04-6017-42f7-b7bc-e043cbfa4bb0", "row_index": 369, "timestamp": "2018-08-05T21:19:34Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIA25G7BZQVTJZ190V9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "424b8d04-6017-42f7-b7bc-e043cbfa4bb0", "eventTime": "2018-08-05T21:19:34Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA25G7BZQVTJZ190V9", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09e968fd-b0dd-4d2c-9a84-1edd3af5d1c6", "record_id": "flaws_cloudtrail:0000370:09e968fd-b0dd-4d2c-9a84-1edd3af5d1c6", "row_index": 370, "timestamp": "2018-08-05T21:19:34Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIA25G7BZQVTJZ190V9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09e968fd-b0dd-4d2c-9a84-1edd3af5d1c6", "eventTime": "2018-08-05T21:19:34Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA25G7BZQVTJZ190V9", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eee334ec-f082-45f8-8cf5-489c7ae9bfe0", "record_id": "flaws_cloudtrail:0000371:eee334ec-f082-45f8-8cf5-489c7ae9bfe0", "row_index": 371, "timestamp": "2018-08-05T21:19:34Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIA25G7BZQVTJZ190V9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eee334ec-f082-45f8-8cf5-489c7ae9bfe0", "eventTime": "2018-08-05T21:19:34Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA25G7BZQVTJZ190V9", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8b006665-dc9c-4e3a-b63f-14f8e38c25a8", "record_id": "flaws_cloudtrail:0000372:e8b006665-dc9c-4e3a-b63f-14f8e38c25a8", "row_index": 372, "timestamp": "2018-08-05T21:19:34Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIA25G7BZQVTJZ190V9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8b006665-dc9c-4e3a-b63f-14f8e38c25a8", "eventTime": "2018-08-05T21:19:34Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA25G7BZQVTJZ190V9", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ddffd82-0682-432d-a693-373fe89065", "record_id": "flaws_cloudtrail:0000373:7ddffd82-0682-432d-a693-373fe89065", "row_index": 373, "timestamp": "2018-08-05T21:19:34Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIA25G7BZQVTJZ190V9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ddffd82-0682-432d-a693-373fe89065", "eventTime": "2018-08-05T21:19:34Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA25G7BZQVTJZ190V9", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f71953a6-1091-4971-a373-33b02e9398d0", "record_id": "flaws_cloudtrail:0000374:f71953a6-1091-4971-a373-33b02e9398d0", "row_index": 374, "timestamp": "2018-08-05T21:19:34Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIA25G7BZQVTJZ190V9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f71953a6-1091-4971-a373-33b02e9398d0", "eventTime": "2018-08-05T21:19:34Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA25G7BZQVTJZ190V9", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13642-40d4-4e71-9b37-8adecdc5e4a7", "record_id": "flaws_cloudtrail:0000375:13642-40d4-4e71-9b37-8adecdc5e4a7", "row_index": 375, "timestamp": "2018-08-05T21:19:34Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIA25G7BZQVTJZ190V9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13642-40d4-4e71-9b37-8adecdc5e4a7", "eventTime": "2018-08-05T21:19:34Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA25G7BZQVTJZ190V9", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6657bc78-ba1a-4a4f-bb43-556ef12200f4", "record_id": "flaws_cloudtrail:0000376:6657bc78-ba1a-4a4f-bb43-556ef12200f4", "row_index": 376, "timestamp": "2018-08-05T21:19:34Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIA25G7BZQVTJZ190V9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6657bc78-ba1a-4a4f-bb43-556ef12200f4", "eventTime": "2018-08-05T21:19:34Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA25G7BZQVTJZ190V9", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a8f0fcb-b50d-47e3-8788-4732fb10640", "record_id": "flaws_cloudtrail:0000377:7a8f0fcb-b50d-47e3-8788-4732fb10640", "row_index": 377, "timestamp": "2018-08-05T21:19:34Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIA25G7BZQVTJZ190V9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a8f0fcb-b50d-47e3-8788-4732fb10640", "eventTime": "2018-08-05T21:19:34Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA25G7BZQVTJZ190V9", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfca643e-cd84-4634-8251-828982d89a330", "record_id": "flaws_cloudtrail:0000378:dfca643e-cd84-4634-8251-828982d89a330", "row_index": 378, "timestamp": "2018-08-05T21:19:34Z", "event_type": "ListSigningCertificates", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIA25G7BZQVTJZ190V9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfca643e-cd84-4634-8251-828982d89a330", "eventTime": "2018-08-05T21:19:34Z", "eventName": "ListSigningCertificates", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA25G7BZQVTJZ190V9", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d02269-41fd-4744-84da-c8cfd8ac13b8", "record_id": "flaws_cloudtrail:0000379:d02269-41fd-4744-84da-c8cfd8ac13b8", "row_index": 379, "timestamp": "2018-08-05T21:19:34Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIA25G7BZQVTJZ190V9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d02269-41fd-4744-84da-c8cfd8ac13b8", "eventTime": "2018-08-05T21:19:34Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA25G7BZQVTJZ190V9", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a93fdf26-5ec3-4b0a-9fe6-10a8d6e70df0", "record_id": "flaws_cloudtrail:0000380:a93fdf26-5ec3-4b0a-9fe6-10a8d6e70df0", "row_index": 380, "timestamp": "2018-08-05T21:19:35Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIA25G7BZQVTJZ190V9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a93fdf26-5ec3-4b0a-9fe6-10a8d6e70df0", "eventTime": "2018-08-05T21:19:35Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA25G7BZQVTJZ190V9", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2c02092-f62f-450b-be40-76de664258fc5", "record_id": "flaws_cloudtrail:0000381:b2c02092-f62f-450b-be40-76de664258fc5", "row_index": 381, "timestamp": "2018-08-05T21:19:35Z", "event_type": "GetAccountSummary", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIA25G7BZQVTJZ190V9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2c02092-f62f-450b-be40-76de664258fc5", "eventTime": "2018-08-05T21:19:35Z", "eventName": "GetAccountSummary", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA25G7BZQVTJZ190V9", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6adb9dd-3ab0-4861-a38e-68c1f1636f41", "record_id": "flaws_cloudtrail:0000382:f6adb9dd-3ab0-4861-a38e-68c1f1636f41", "row_index": 382, "timestamp": "2018-08-05T21:19:35Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIA25G7BZQVTJZ190V9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6adb9dd-3ab0-4861-a38e-68c1f1636f41", "eventTime": "2018-08-05T21:19:35Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA25G7BZQVTJZ190V9", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65480fda-fd7e-4261-b58a-4ce1b8f87d8e", "record_id": "flaws_cloudtrail:0000383:65480fda-fd7e-4261-b58a-4ce1b8f87d8e", "row_index": 383, "timestamp": "2018-08-05T21:19:35Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIA25G7BZQVTJZ190V9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65480fda-fd7e-4261-b58a-4ce1b8f87d8e", "eventTime": "2018-08-05T21:19:35Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA25G7BZQVTJZ190V9", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a762c6cc-1b43-4f39-9f76-867aef520873", "record_id": "flaws_cloudtrail:0000384:a762c6cc-1b43-4f39-9f76-867aef520873", "row_index": 384, "timestamp": "2018-08-05T21:19:35Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": "flaws", "access_key_id": "ASIA25G7BZQVTJZ190V9", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "console.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a762c6cc-1b43-4f39-9f76-867aef520873", "eventTime": "2018-08-05T21:19:35Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "console.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "accessKeyId": "ASIA25G7BZQVTJZ190V9", "userName": "flaws", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T16:50:57Z"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "411ed0fc-0a56-4896-af98-92822d91d", "record_id": "flaws_cloudtrail:0000385:411ed0fc-0a56-4896-af98-92822d91d", "row_index": 385, "timestamp": "2018-08-05T22:07:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSAccount", "arn": null, "account_id": "369072737419", "principal_id": "AIDASO0WDNC3GCQUJIYAZ", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "aws-sdk-go/1.4.14 (go1.9.2; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SummitRouteAudit"], "raw_record_size_bytes": 1501, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "411ed0fc-0a56-4896-af98-92822d91d", "eventTime": "2018-08-05T22:07:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "aws-sdk-go/1.4.14 (go1.9.2; darwin; amd64)", "awsRegion": "us-east-1", "userIdentity": {"type": "AWSAccount", "principalId": "AIDASO0WDNC3GCQUJIYAZ", "accountId": "369072737419"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "roleSessionName": "6964842677283343441", "durationSeconds": 900}, "responseElements": {"credentials": {"accessKeyId": "ASIADVYLMN3D5NJCFDFU", "expiration": "Aug 5, 2018 10:22:54 PM", "sessionToken": "FQoGZXIvYXdzEIj//////////wEaDAqnV4nsRAQ6zDNWtyL7AZZ5qVU8s/OzEpCCfOn72/uj0VzZSc8uffipeKSg3iY6le0A7etxWhf4Xq2rC/cfJLroP+gi78CxeJoc/aATov6surfKemacTmEpJDBxrG5/FbHNlKvB7U8lU/UklJBvfUkDFGUzF4iCrQ0GxL/M3B331wnPywzJLWfAHblcMd3kmlI34g3uyonGXl+XS/aDM2pFB5OiP9+eroEQCrBbW8jW4Ii4/kRgJldPErRAEvh6Yz+HPTRe5y7Xr/MWvImHF4yokU5eVJX17V8WgZ9+9EQVXmQobyHfMoOrT3hfeHx/dbxWHBdYDU/Szscrj2mRJ2ueRFkLnd2wcWOMKLrqndsF"}, "assumedRoleUser": {"assumedRoleId": "AROAMY611GPC0EPB1P0F9:6964842677283343441", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/6964842677283343441"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7548dc1-2dfc-47e0-a6a2-a8bd409a7e1e", "record_id": "flaws_cloudtrail:0000386:b7548dc1-2dfc-47e0-a6a2-a8bd409a7e1e", "row_index": 386, "timestamp": "2018-08-05T22:07:55Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/6964842677283343441", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:6964842677283343441", "user_name": null, "access_key_id": "ASIADVYLMN3D5NJCFDFU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "aws-cli/1.14.66 Python/2.7.10 Darwin/17.6.0 botocore/1.9.19", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1144, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7548dc1-2dfc-47e0-a6a2-a8bd409a7e1e", "eventTime": "2018-08-05T22:07:55Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "aws-cli/1.14.66 Python/2.7.10 Darwin/17.6.0 botocore/1.9.19", "awsRegion": "us-east-1", "errorCode": "ResourceNotFoundException", "errorMessage": "Function not found: arn:aws:lambda:us-east-1:811596193553:function:Level6", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:6964842677283343441", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/6964842677283343441", "accountId": "811596193553", "accessKeyId": "ASIADVYLMN3D5NJCFDFU", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T22:07:54Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb06bbf9-dd22-4d4d-a134-a3b5516d1a2d", "record_id": "flaws_cloudtrail:0000387:bb06bbf9-dd22-4d4d-a134-a3b5516d1a2d", "row_index": 387, "timestamp": "2018-08-05T22:08:19Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSAccount", "arn": null, "account_id": "369072737419", "principal_id": "AIDASO0WDNC3GCQUJIYAZ", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "aws-sdk-go/1.4.14 (go1.9.2; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SummitRouteAudit"], "raw_record_size_bytes": 1504, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb06bbf9-dd22-4d4d-a134-a3b5516d1a2d", "eventTime": "2018-08-05T22:08:19Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "aws-sdk-go/1.4.14 (go1.9.2; darwin; amd64)", "awsRegion": "us-east-1", "userIdentity": {"type": "AWSAccount", "principalId": "AIDASO0WDNC3GCQUJIYAZ", "accountId": "369072737419"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "roleSessionName": "0518908990474675889", "durationSeconds": 900}, "responseElements": {"credentials": {"accessKeyId": "ASIAPNOCMRRQI4K5NXEU", "expiration": "Aug 5, 2018 10:23:19 PM", "sessionToken": "FQoGZXIvYXdzEIj//////////wEaDHDSNGW98Wc3mrt3bSL7AVGzjzILFXviLQdqoI5UO6PiYPgDh1YSr/knD4Mo34ALs4vvLJ/oj1b1ZRG9wbZXpdfeUlVw5Ngr1yeez4+NTRBnCJArWfnk3nvbPO9sm/kB6K4iQE3bWaaBDdVC6NPwsvA/RLJQyh1pGnmLzvHf6CyH8xFnwBXrUDWN7KmJ8ManP4kXkUQVVKikD8NR3/GjYEvA0Xot/gP+rIEL8Juo9xvAw20PF1KXyoaHh5DCTdiUVriTrLLurBFSIdqVwOBL/A645UQwzNg+F0EACEaLhg+c3ICv7qJzjg9f+mMS/sC9jqFXyT9S2QhDDmKD/wEXtmL/iqSVtL+ERigbKNPqndsF"}, "assumedRoleUser": {"assumedRoleId": "AROAMY611GPC0EPB1P0F9:0518908990474675889", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/0518908990474675889"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "864d059d-0e2b-4208-ad6a-b6d7b4ffbb85", "record_id": "flaws_cloudtrail:0000388:864d059d-0e2b-4208-ad6a-b6d7b4ffbb85", "row_index": 388, "timestamp": "2018-08-05T22:08:20Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/0518908990474675889", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:0518908990474675889", "user_name": null, "access_key_id": "ASIAPNOCMRRQI4K5NXEU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "aws-cli/1.14.66 Python/2.7.10 Darwin/17.6.0 botocore/1.9.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1010, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "864d059d-0e2b-4208-ad6a-b6d7b4ffbb85", "eventTime": "2018-08-05T22:08:20Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "aws-cli/1.14.66 Python/2.7.10 Darwin/17.6.0 botocore/1.9.19", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:0518908990474675889", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/0518908990474675889", "accountId": "811596193553", "accessKeyId": "ASIAPNOCMRRQI4K5NXEU", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T22:08:19Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1df5479b-9093-4646-85bc-01097e13c124", "record_id": "flaws_cloudtrail:0000389:1df5479b-9093-4646-85bc-01097e13c124", "row_index": 389, "timestamp": "2018-08-05T22:09:04Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSAccount", "arn": null, "account_id": "369072737419", "principal_id": "AIDASO0WDNC3GCQUJIYAZ", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "aws-sdk-go/1.4.14 (go1.9.2; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SummitRouteAudit"], "raw_record_size_bytes": 1501, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1df5479b-9093-4646-85bc-01097e13c124", "eventTime": "2018-08-05T22:09:04Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "aws-sdk-go/1.4.14 (go1.9.2; darwin; amd64)", "awsRegion": "us-east-1", "userIdentity": {"type": "AWSAccount", "principalId": "AIDASO0WDNC3GCQUJIYAZ", "accountId": "369072737419"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "roleSessionName": "7079073649880780146", "durationSeconds": 900}, "responseElements": {"credentials": {"accessKeyId": "ASIAY5759ZJ2ZMOJA9CN", "expiration": "Aug 5, 2018 10:24:04 PM", "sessionToken": "FQoGZXIvYXdzEIj//////////wEaDGRV48yk5ZG1oyE7FSL7AX9X55e3XfHr7ndGqFPbylSE0krefDnsvzeEh9ABFSL4RyaRrnc2NzpwbqN33La8NRHzl4yZD9ErWAAsX8upKk8qTlpwVCcliYTMAAPhxUTcHDP4dCou8UwKNCgwleoY7yKFWqscyNrfDbxKUn0Vfeg2vTpGYSeCnKh0IwVJ3+aDEOEvbP44aR+0avy6oF6pcSjsAxQBqkfsy4IXjIzQcxU1MrqhyVHJnjwSkLdE+H/7HgfV5+Y6irY6lBUEUNwYp7VroYck3yLcBJiy3R5gNRRDdy/qsvUzg7NkmByhkIT9FcZH8y0U5lkJy/NID1XoQlTXr4Sda0EGevwSKIDrndsF"}, "assumedRoleUser": {"assumedRoleId": "AROAMY611GPC0EPB1P0F9:7079073649880780146", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/7079073649880780146"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b64a488-6c7e-4db1-9472-5b9b12f075c4", "record_id": "flaws_cloudtrail:0000390:6b64a488-6c7e-4db1-9472-5b9b12f075c4", "row_index": 390, "timestamp": "2018-08-05T22:09:05Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/7079073649880780146", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:7079073649880780146", "user_name": null, "access_key_id": "ASIAY5759ZJ2ZMOJA9CN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b64a488-6c7e-4db1-9472-5b9b12f075c4", "eventTime": "2018-08-05T22:09:05Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The user with name test cannot be found.", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:7079073649880780146", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/7079073649880780146", "accountId": "811596193553", "accessKeyId": "ASIAY5759ZJ2ZMOJA9CN", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T22:09:04Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"userName": "test"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "225959-7eed-4a83-b7b7-c11c0d8d6909", "record_id": "flaws_cloudtrail:0000391:225959-7eed-4a83-b7b7-c11c0d8d6909", "row_index": 391, "timestamp": "2018-08-05T22:09:06Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/7079073649880780146", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:7079073649880780146", "user_name": null, "access_key_id": "ASIAY5759ZJ2ZMOJA9CN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 996, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "225959-7eed-4a83-b7b7-c11c0d8d6909", "eventTime": "2018-08-05T22:09:06Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:7079073649880780146", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/7079073649880780146", "accountId": "811596193553", "accessKeyId": "ASIAY5759ZJ2ZMOJA9CN", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T22:09:04Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac9e98cb-7722-4e66-9e5d-c9a0a97102d7", "record_id": "flaws_cloudtrail:0000392:ac9e98cb-7722-4e66-9e5d-c9a0a97102d7", "row_index": 392, "timestamp": "2018-08-05T22:09:10Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/7079073649880780146", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:7079073649880780146", "user_name": null, "access_key_id": "ASIAY5759ZJ2ZMOJA9CN", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1011, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac9e98cb-7722-4e66-9e5d-c9a0a97102d7", "eventTime": "2018-08-05T22:09:10Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.6.0 Botocore/1.8.50", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:7079073649880780146", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/7079073649880780146", "accountId": "811596193553", "accessKeyId": "ASIAY5759ZJ2ZMOJA9CN", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-05T22:09:04Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "304912ec-38b9-4ac2-8c45-0e6fb2bc6282", "record_id": "flaws_cloudtrail:0000393:304912ec-38b9-4ac2-8c45-0e6fb2bc6282", "row_index": 393, "timestamp": "2018-08-05T22:11:53Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1494, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "304912ec-38b9-4ac2-8c45-0e6fb2bc6282", "eventTime": "2018-08-05T22:11:53Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAYK0370OZH8E1L625", "expiration": "Aug 6, 2018 4:35:50 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df73d919-33e2-4b55-b10c-9c0e6d41529f", "record_id": "flaws_cloudtrail:0000394:df73d919-33e2-4b55-b10c-9c0e6d41529f", "row_index": 394, "timestamp": "2018-08-05T23:11:53Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1493, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df73d919-33e2-4b55-b10c-9c0e6d41529f", "eventTime": "2018-08-05T23:11:53Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIARQFJXQ0GAEAN5NS2", "expiration": "Aug 6, 2018 5:36:14 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61d10c89-6773-45a0-989e-d007395efbad", "record_id": "flaws_cloudtrail:0000395:61d10c89-6773-45a0-989e-d007395efbad", "row_index": 395, "timestamp": "2018-08-05T23:43:58Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1948, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61d10c89-6773-45a0-989e-d007395efbad", "eventTime": "2018-08-05T23:43:58Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIA7RVKBRTQI276HPOL", "expiration": "Aug 6, 2018 12:43:58 AM", "sessionToken": "AgoGb3JpZ2luEMv//////////wEaCXVzLXdlc3QtMiKAAoHkJsOSVczmPQYE5t2SNqx5ZDgHZow4DTDbijAexv8fWUOuysD1jq23j3BggL7Fr86k+RUORZbi8NI6BR5fV2J7X3lx0s2CtwFvgKg7lc9fNdHwn+6j6idDo1dd6gM35a8N7qCYjHy4IRteBoMjEe593bMkr0y3Yyiu23pPGKwyizYs00SLtfh1VA0yCsSvLtQ9Qv+ATRdnYMwZAmDtNJVmxgBAKclumAQ8CjkiwGKDWAH1YvR8Pbc336SqSEF73IGy7Ln0D+OKerf2LXs+pxnx6D4yiH85fDxLPosftJhoamqjDD0mJZKMvDw9v4z8RfE8LbBC6FhB0cA+K7hNNLwq8QIIsf//////////ARAAGgw5NzU0MjYyNjIwMjkiDHtv4SUE611SkuuedCrFAsoFiRRYIiv4HEtdw09stDCR+L/leyJnZoKt0bCUgXTzffqNBclxMjf2xZ7PV5Mw3trNS4zsp+e7QWL12KhqhRoKVJMbxu2WEoRm4OsfOv/REMsNq0exr3uBKRHaUhRw/NlS6igis/wjFNv2oK3SKBhF6azdMYPQNUig8J7UgGtoVakEw69Q28S+t3ka3K33e6iLEh5djEMrx/Oy+EpRkwaUWgX0UmkwqEoH0yJ0aIIAtZei6ENj7tUjpO2SW6bMndpp8WEFuj9xHkdx1bz9EMr8sd4ig3NMHaoVZWefCjyFX3qVko/yrLcDlOjF4AwwVcGW3scHimnW3mBsEXk/riBXoB0ShPX9lzUpJ1x8OD9kGdp6EtaKKIrgdNY4ldXYRR2yshafdBFK1g6DBaQ5PWIvx9NX/PWy9GQT6R5EyJJIkxRHuR8wvpee2wU="}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8a89f1f-ecce-4112-a7d4-94ad490b6759", "record_id": "flaws_cloudtrail:0000396:e8a89f1f-ecce-4112-a7d4-94ad490b6759", "row_index": 396, "timestamp": "2018-08-06T00:11:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1493, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8a89f1f-ecce-4112-a7d4-94ad490b6759", "eventTime": "2018-08-06T00:11:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAPOAUNG3M1VMV434B", "expiration": "Aug 6, 2018 6:43:53 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7dacbdd9-fad4-4d67-bac9-311836ba26f", "record_id": "flaws_cloudtrail:0000397:7dacbdd9-fad4-4d67-bac9-311836ba26f", "row_index": 397, "timestamp": "2018-08-06T01:11:53Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1492, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7dacbdd9-fad4-4d67-bac9-311836ba26f", "eventTime": "2018-08-06T01:11:53Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAAPNCLUWDLBUSAHBJ", "expiration": "Aug 6, 2018 7:34:43 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "115894c-dd2b-4b6f-848b-f76ec5c9558e", "record_id": "flaws_cloudtrail:0000398:115894c-dd2b-4b6f-848b-f76ec5c9558e", "row_index": 398, "timestamp": "2018-08-06T02:11:53Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1492, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "115894c-dd2b-4b6f-848b-f76ec5c9558e", "eventTime": "2018-08-06T02:11:53Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAPRZS0NN9BDDF0RM0", "expiration": "Aug 6, 2018 8:25:54 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c95dea12-69d9-487b-9d6e-c421abf68fc3", "record_id": "flaws_cloudtrail:0000399:c95dea12-69d9-487b-9d6e-c421abf68fc3", "row_index": 399, "timestamp": "2018-08-06T03:11:53Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1492, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c95dea12-69d9-487b-9d6e-c421abf68fc3", "eventTime": "2018-08-06T03:11:53Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAPES0H2TKTUJWUR3F", "expiration": "Aug 6, 2018 9:37:58 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b333d99-c5d6-42d6-8f2a-fc828af1ad75", "record_id": "flaws_cloudtrail:0000400:6b333d99-c5d6-42d6-8f2a-fc828af1ad75", "row_index": 400, "timestamp": "2018-08-06T04:05:01Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.253.251.250", "user_agent": "[aws-cli/1.15.71 Python/2.7.10 Darwin/16.7.0 botocore/1.10.70]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 644, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b333d99-c5d6-42d6-8f2a-fc828af1ad75", "eventTime": "2018-08-06T04:05:01Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.253.251.250", "userAgent": "[aws-cli/1.15.71 Python/2.7.10 Darwin/16.7.0 botocore/1.10.70]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c050abf1-7c66-4889-902c-1c3e803a2e7d", "record_id": "flaws_cloudtrail:0000401:c050abf1-7c66-4889-902c-1c3e803a2e7d", "row_index": 401, "timestamp": "2018-08-06T04:05:35Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.253.251.250", "user_agent": "aws-cli/1.15.71 Python/2.7.10 Darwin/16.7.0 botocore/1.10.70", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c050abf1-7c66-4889-902c-1c3e803a2e7d", "eventTime": "2018-08-06T04:05:35Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.253.251.250", "userAgent": "aws-cli/1.15.71 Python/2.7.10 Darwin/16.7.0 botocore/1.10.70", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af8f5ed0-2f72-4d21-a7f4-b69ac369ccee", "record_id": "flaws_cloudtrail:0000402:af8f5ed0-2f72-4d21-a7f4-b69ac369ccee", "row_index": 402, "timestamp": "2018-08-06T04:06:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.253.251.250", "user_agent": "aws-cli/1.15.71 Python/2.7.10 Darwin/16.7.0 botocore/1.10.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af8f5ed0-2f72-4d21-a7f4-b69ac369ccee", "eventTime": "2018-08-06T04:06:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.253.251.250", "userAgent": "aws-cli/1.15.71 Python/2.7.10 Darwin/16.7.0 botocore/1.10.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9c5853b-ced6-4cc0-b90c-eda94191d137", "record_id": "flaws_cloudtrail:0000403:b9c5853b-ced6-4cc0-b90c-eda94191d137", "row_index": 403, "timestamp": "2018-08-06T04:11:53Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1494, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9c5853b-ced6-4cc0-b90c-eda94191d137", "eventTime": "2018-08-06T04:11:53Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAJU7J3CR4B0AGB9U2", "expiration": "Aug 6, 2018 10:27:51 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efcb8f91-a46d-4a6e-b86a-dbe011ebf0c6", "record_id": "flaws_cloudtrail:0000404:efcb8f91-a46d-4a6e-b86a-dbe011ebf0c6", "row_index": 404, "timestamp": "2018-08-06T04:21:17Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAB6V3PJVKY4S2IXEK", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "45.14.160.100", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efcb8f91-a46d-4a6e-b86a-dbe011ebf0c6", "eventTime": "2018-08-06T04:21:17Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "45.14.160.100", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAB6V3PJVKY4S2IXEK", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-08-06T04:21:17Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2018/08/06/[$LATEST]f166dc658fa82f18af953ad4cfaf9e6b"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b747026c-8242-4df0-8ef5-2ebb0ebf4073", "record_id": "flaws_cloudtrail:0000405:6b747026c-8242-4df0-8ef5-2ebb0ebf4073", "row_index": 405, "timestamp": "2018-08-06T04:21:17Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1230, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b747026c-8242-4df0-8ef5-2ebb0ebf4073", "eventTime": "2018-08-06T04:21:17Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAB6V3PJVKY4S2IXEK", "expiration": "Aug 6, 2018 4:21:17 PM", "sessionToken": "FQoGZXIvYXdzEI7//////////wEaDJGuG32SNzHn7b1xKiLfATMLD6JoSn4psz+nEi119Yd9LEa0K3XTDt0l9RCy3nPylFHR0O6ooze+3qRe8LiZhZUdYPPr0oBw5TY689u5fRV2V46P8w1H/i0oOvwPbHDZ+qpKGixB2HmZw2HqBpUElLHvSjpuwaolnoWKl/zA0HPoK0bOH4jqecPe8aw0oy8ejd85gEnfoUQXZn1+uEkrI89nByc2ZoOGmPcPuC6aXNly4h3HpZMbXgCvvTsuj541s/iYPXVGxdCIoFm2inmQY7CagKpiUsz/soMULSOKfO2FSCqsK0WrP2LzYqVWAYQovZmf2wU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7122a6f3-eac5-42e7-990b-b6e21c68f153", "record_id": "flaws_cloudtrail:0000406:7122a6f3-eac5-42e7-990b-b6e21c68f153", "row_index": 406, "timestamp": "2018-08-06T04:21:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "1.253.251.250", "user_agent": "aws-cli/1.15.71 Python/2.7.10 Darwin/16.7.0 botocore/1.10.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7122a6f3-eac5-42e7-990b-b6e21c68f153", "eventTime": "2018-08-06T04:21:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "1.253.251.250", "userAgent": "aws-cli/1.15.71 Python/2.7.10 Darwin/16.7.0 botocore/1.10.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11b376773-ffbd-492a-a8f0-354bf75bf050", "record_id": "flaws_cloudtrail:0000407:11b376773-ffbd-492a-a8f0-354bf75bf050", "row_index": 407, "timestamp": "2018-08-06T05:11:53Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1495, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11b376773-ffbd-492a-a8f0-354bf75bf050", "eventTime": "2018-08-06T05:11:53Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIANCGAR42DLPLP90TG", "expiration": "Aug 6, 2018 11:27:46 AM", "sessionToken": "FQoGZXIvYXdzEI///////////wEaDPLFutouykNIR6AjuiK3A5icYKJ4XD5erC5fsYuak6EyTQdeHpDh2WpJjcfNdrEbf0RPX/+DVGwmnDdzLbGd59Meg0SuGwnuD4JWfJ8YnLoeM5R8Yi+lR92Y36/mNHTf42aXrecUNirPaF7rBT/O9qehi2KTQwoGDUAXt7V/5BoJSboFK8AsorqluD9IM0oU2makzAODaxCpEOkfDzZkOv8l4aFZqCJwfNwUZirMTguKx/Ut0OeQFGbelVKsj2t5StAZWD3GZWcUsW/EZMoz0dRm4NF7lRIqRcCmRmjb2LQaQCetcup7/+EDq/TItFNq0qByKJTWYiuM/706ByiXn0yEE2TkfndmTnbRrKmaL2Y5/yhXNHYOWhMbwhJp8ov3tgyabc7TpI74w/UIWb3IYdEbMykAcToYgkoY2GMDNznsLJiHc/xb0YlZ8V8nMNX7vbYtT5MqsxTsm4+mW+mjJYVCoWEpo5dyzIiJuAEU/k1up6JtXrPqVszyZKqCARo4IWXgeH6+7dYVO+9Bq2Czx38kAyFSkYgzGsg+M5+KQpvB3UtzN/aDJnroIG992y8Z3shGxZTmHReTrN1G9OyMppCMnor75/YombGf2wU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e374576e9-7250-4002-bc51-cda3a277dae2", "record_id": "flaws_cloudtrail:0000408:e374576e9-7250-4002-bc51-cda3a277dae2", "row_index": 408, "timestamp": "2018-08-06T05:44:01Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1948, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e374576e9-7250-4002-bc51-cda3a277dae2", "eventTime": "2018-08-06T05:44:01Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIAPPGFXYI8FB5Y6L9P", "expiration": "Aug 6, 2018 6:44:01 AM", "sessionToken": "AgoGb3JpZ2luENH//////////wEaCXVzLXdlc3QtMiKAAlHsZutdZjGGqg52A9m8jIJJyyoYQHz6cI+OPdCxLICNBOgJHaIR6S3gAZO4+8BOZNFWj9u+cD0v6WQuO4ST9iGZTBwRPXC7mamn6WX0sTSD5ljkI6zNumAQJNIW11EYhvjxA1aidpdbHPV+KlmH91VmwnGqe2RTdAzBo0FJR5Due8MixHoyE3SSygdIO/9beUKnFOv5YlHi2iLYr8uTlTEHCAv5yIlB8cZ3rd+APVkHi01pHOQTHcog1ikGseL0IN20qLkhICzUMyQP+RM7nDWW0PZErpSCchU1+94iZwUzMwBTO6oZApV1bEFRa2ykLxP4O55KdfeWDeCb1T1WGBQq8QIIt///////////ARAAGgw5NzU0MjYyNjIwMjkiDD6BB3pGHmqQi41cMCrFAtSHOq+RbHZY+XKOiXc1x0Yv75zaXdj4WAc4uk3XIhrISiDQetNN4xrJQ+rFGEs4xFcBnXTsqrSEfhBPt1wq4pCY6UidVUgbkB1bdFSXfnrnoW1i2P9L8HGTOiQhL1alQU2waPeupDxzVubI2OYhEowtxa5XliUv2uLH0Rwb5tE0NIw7bOI1GaYbdDGz9fXVfOfP9ExMgbVMoRErGwVme9rOU6pbMwX+bxEOGlhaydlXxJUDMo/B5Vdae/FMq1LSiDsdiRCyX3tCCgC1iYi9fKetgnYeAREtV1NdLgiy+kzRfplbrHO3eqxIzUTUz9e2SPaIlYjnelSQcwFERdGeFSu8dBgkRPHHOBRdUZ97BpINnyvhKqeArqcD11B5EfNHs1dwgA96m/4ciIX/oU1XqzAK5nLY6EWDV4vKTK3wXifuZFbfxswwocCf2wU="}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77bbf330-8b48-4748-bbf8-81198b31e01", "record_id": "flaws_cloudtrail:0000409:77bbf330-8b48-4748-bbf8-81198b31e01", "row_index": 409, "timestamp": "2018-08-06T06:10:47Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "97.5.0.5", "user_agent": "[aws-cli/1.15.70 Python/3.6.5 Linux/4.15.0-1014-gcp botocore/1.10.69]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 644, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77bbf330-8b48-4748-bbf8-81198b31e01", "eventTime": "2018-08-06T06:10:47Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "97.5.0.5", "userAgent": "[aws-cli/1.15.70 Python/3.6.5 Linux/4.15.0-1014-gcp botocore/1.10.69]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1dafff1-0d10-4ac3-b125-5e1827d266fb", "record_id": "flaws_cloudtrail:0000410:b1dafff1-0d10-4ac3-b125-5e1827d266fb", "row_index": 410, "timestamp": "2018-08-06T06:11:53Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1493, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1dafff1-0d10-4ac3-b125-5e1827d266fb", "eventTime": "2018-08-06T06:11:53Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAOT4BI1LCQCNRFP0T", "expiration": "Aug 6, 2018 12:14:39 PM", "sessionToken": "FQoGZXIvYXdzEJD//////////wEaDGStesBARFzE2z3XuCK3A6MsQr8I8LFEXEHaPB4bx8Lg99GfCRzTBIxzTCA+Gisd+ucwWuRrg0oWhV4f4ExpGK92p6VE1Uu1tQy0MqO/xfMCo+0DI+hCFfq9yixFJAhw1lqviyBEzL8JMA0GOse7AtDHXAAZeIMWqr0qLl7U36k50VCRByDEAnwgLKZ3RMEmQJPugNEbvv/OOj0VXOHXsv+rG6EEAJB84tMnli+I3AsC8Zn68/daN0aJJsXs4Sr9fwQHnhAeagPVCV+QoRa4lNo4uCEs8BFJGDnfyyFIc8sKeKTOZa68sMENnIcVMzsv8IqNQgm9sftGkb7twEACFYmOYZ4vTGHU98eIuVXR6CUyLdgdPBujUq3j3xfF70a0i+G4vm2T3T43Ze9meuvrV2Y7IIKb8e81qIsBokUUfnRoaXB3KaQIyVFsw9OY5on5sGuEl2ICWlv0nI2aTLtIZsHawjn3W+hTNANSvw/KVaEIJN+qKgMkLBn2iJ+tIPMj0f8nOMebXni4t4UiAeSVQ/cqjbJl23TzPOirz2hkutAerxbsKLGGqlQ32+6RO8E4MzOoWMysYRlTDMinVyGs+2F1almGky4oqc2f2wU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c4de9bc-a18b-47a8-95b7-6e7db26fd13e", "record_id": "flaws_cloudtrail:0000411:9c4de9bc-a18b-47a8-95b7-6e7db26fd13e", "row_index": 411, "timestamp": "2018-08-06T06:12:39Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "47.250.219.4", "user_agent": "[aws-cli/1.15.71 Python/2.7.15 Linux/4.15.0-kali3-amd64 botocore/1.10.70]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 654, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c4de9bc-a18b-47a8-95b7-6e7db26fd13e", "eventTime": "2018-08-06T06:12:39Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "47.250.219.4", "userAgent": "[aws-cli/1.15.71 Python/2.7.15 Linux/4.15.0-kali3-amd64 botocore/1.10.70]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32af2347-2790-433d-811a-bd88ba7a8340", "record_id": "flaws_cloudtrail:0000412:32af2347-2790-433d-811a-bd88ba7a8340", "row_index": 412, "timestamp": "2018-08-06T06:19:22Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "47.250.219.4", "user_agent": "aws-cli/1.15.71 Python/2.7.15 Linux/4.15.0-kali3-amd64 botocore/1.10.70", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32af2347-2790-433d-811a-bd88ba7a8340", "eventTime": "2018-08-06T06:19:22Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "47.250.219.4", "userAgent": "aws-cli/1.15.71 Python/2.7.15 Linux/4.15.0-kali3-amd64 botocore/1.10.70", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "afe79d19-a0aa-45fc-ac0e-a5e4544d9d03", "record_id": "flaws_cloudtrail:0000413:afe79d19-a0aa-45fc-ac0e-a5e4544d9d03", "row_index": 413, "timestamp": "2018-08-06T06:19:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "47.250.219.4", "user_agent": "aws-cli/1.15.71 Python/2.7.15 Linux/4.15.0-kali3-amd64 botocore/1.10.70", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "afe79d19-a0aa-45fc-ac0e-a5e4544d9d03", "eventTime": "2018-08-06T06:19:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "47.250.219.4", "userAgent": "aws-cli/1.15.71 Python/2.7.15 Linux/4.15.0-kali3-amd64 botocore/1.10.70", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b51efb62-4a54-40ac-9a6c-be7a20185fb1", "record_id": "flaws_cloudtrail:0000414:b51efb62-4a54-40ac-9a6c-be7a20185fb1", "row_index": 414, "timestamp": "2018-08-06T06:21:14Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "97.5.0.5", "user_agent": "[aws-cli/1.15.70 Python/3.6.5 Linux/4.15.0-1014-gcp botocore/1.10.69]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 646, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b51efb62-4a54-40ac-9a6c-be7a20185fb1", "eventTime": "2018-08-06T06:21:14Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "97.5.0.5", "userAgent": "[aws-cli/1.15.70 Python/3.6.5 Linux/4.15.0-1014-gcp botocore/1.10.69]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a187ad1-d55d-4ea4-ab76-281bfcbeac17", "record_id": "flaws_cloudtrail:0000415:9a187ad1-d55d-4ea4-ab76-281bfcbeac17", "row_index": 415, "timestamp": "2018-08-06T07:11:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1493, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a187ad1-d55d-4ea4-ab76-281bfcbeac17", "eventTime": "2018-08-06T07:11:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA3X7RYJO8Z84XIWM7", "expiration": "Aug 6, 2018 1:26:38 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46cc4c42-411e-4722-9b41-fe80a212e92d", "record_id": "flaws_cloudtrail:0000416:46cc4c42-411e-4722-9b41-fe80a212e92d", "row_index": 416, "timestamp": "2018-08-06T07:56:16Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "[aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 639, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46cc4c42-411e-4722-9b41-fe80a212e92d", "eventTime": "2018-08-06T07:56:16Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "[aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d040392e-bbf6-4d1f-93bc-82ddea775ab7", "record_id": "flaws_cloudtrail:0000417:9d040392e-bbf6-4d1f-93bc-82ddea775ab7", "row_index": 417, "timestamp": "2018-08-06T07:59:02Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d040392e-bbf6-4d1f-93bc-82ddea775ab7", "eventTime": "2018-08-06T07:59:02Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "acd878e9-029d-4acb-9a00-c38c41c77082", "record_id": "flaws_cloudtrail:0000418:acd878e9-029d-4acb-9a00-c38c41c77082", "row_index": 418, "timestamp": "2018-08-06T08:00:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "acd878e9-029d-4acb-9a00-c38c41c77082", "eventTime": "2018-08-06T08:00:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26b3f836-5b71-4c18-812f-6e1cb08d00d0", "record_id": "flaws_cloudtrail:0000419:26b3f836-5b71-4c18-812f-6e1cb08d00d0", "row_index": 419, "timestamp": "2018-08-06T08:00:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1046, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26b3f836-5b71-4c18-812f-6e1cb08d00d0", "eventTime": "2018-08-06T08:00:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpVitROE5QQllIR2RqZWF5c3NYcnNwZXJMenQwd1hpZjVmdEp5QmNFYS91bFVJSTNsbU9HcXhoeThjdGN5TmVHT0h6NlBncmRFZWtmdG1BZkxsVFViSHpaTW9oV2NZVWNuSjQ0Sks2SklKY0ZOV2s5ZUZpQlRvR21qRFBKbUxlb3A4VkZhd0VLcjZEWkZsRFFVcytlTWxQdVNhaGRmZzlVQ3ZJai9JWlBPMDBMMnJPTGxpdkN4bmppUURtWSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f3df871-2c90-402b-bc68-40278e8eb5", "record_id": "flaws_cloudtrail:0000420:7f3df871-2c90-402b-bc68-40278e8eb5", "row_index": 420, "timestamp": "2018-08-06T08:00:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1048, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f3df871-2c90-402b-bc68-40278e8eb5", "eventTime": "2018-08-06T08:00:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsSy9lb1ZGcUJlSjI1bTJYcVVOOXo2MzJMRGYwNXZLZTFSdTY2ZjNUTDlSUG9nQzZhbHZFNlBmeTlyTmNJN0F6WFBLRDZQMGNaRjZPak1kOUpHdVNIWEc0UU1hRUtBc0JhcFhEU2k5VzBaMllSRjljNUxGQno2UkhTaFdxQ3RhMzJTTUNkWm1ZZ1JGbHlQalQ3WUNaOEpZMTRhMkFBb0ZVMkpkdjhrNUlSSGdzdkwzYXJIVkZrVklTeXRlNWJXdz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec96a937-849e-45a4-a0ce-ea9b812b83ac", "record_id": "flaws_cloudtrail:0000421:ec96a937-849e-45a4-a0ce-ea9b812b83ac", "row_index": 421, "timestamp": "2018-08-06T08:00:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1050, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec96a937-849e-45a4-a0ce-ea9b812b83ac", "eventTime": "2018-08-06T08:00:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsbUMvdnhzeU5WbGpEdkNFNnNaU0V6UFRyMDhzem9nYTdWdDJjeXhMY2lhUG9qcmo2emZJMFQ4aXR4a3E1Y0ZwWVQraXNaQnhoQXRVRXhQRSsybUNXUmEzR25JaFFuVGZ1QjNHNlBwb3d6WUNRSHJrY09zbHFkSnhLNTZnQnZVK1dxRG05ZStraDJKQ2lYc2pFSWppa0c5MWdOU29sL2N1VytKTG1IY3h4SFRaVjQ3amI1bGNsREhmcGVHOXJnUVMiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90ee94eb-ead7-48aa-afb3-ad95c2a4be07", "record_id": "flaws_cloudtrail:0000422:90ee94eb-ead7-48aa-afb3-ad95c2a4be07", "row_index": 422, "timestamp": "2018-08-06T08:00:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1050, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90ee94eb-ead7-48aa-afb3-ad95c2a4be07", "eventTime": "2018-08-06T08:00:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlTTU4cENYQXcxdWVIclM2YkpyK1RDQ25FcnJ5NllRNkY1ckFzTE15R2Rhajh4YmN2dUR1KzRiQzkrRkZTRzhCVGpOWjcwcEpKaEY4US9iOTAvWTFrOExLeEU5RjR1MXBRVFJnek9FTjJTejlSdndxQlE0ZXRLVnZGNi9uc1hFSHdvVjhaQTZ6dkpaTzJJcXZRQ1FRMy9QdEV5MFEwUnM0QlVhQ05JY0RaWnZZMnlDdFlmRjJhZERoczFSeXZYbWQiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad485747d-7a91-4177-a0eb-d7cc5f1c5cd0", "record_id": "flaws_cloudtrail:0000423:ad485747d-7a91-4177-a0eb-d7cc5f1c5cd0", "row_index": 423, "timestamp": "2018-08-06T08:00:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1051, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad485747d-7a91-4177-a0eb-d7cc5f1c5cd0", "eventTime": "2018-08-06T08:00:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBS2JnUEN6M1k5QmdHWmJzSGZzQldTNTFRWDdvSnNJV20xLzM2eTFDQ1U2eVpOMVQxUWd0aVVtK2dMZ3k0aWtpTWVaTERQbzFCeFR5MjAxSG5zZW02UC9NK2RJSDBTbzJJTG54RVpraXMzNjRLMnllMjVMTzJYT0pNRnVIQjRVcGozRFZNdXF3NnIxUDNwNDBnZlYveWlaYkFqUXJhL3lLNGtNbk02K2ZWbjRhK3BpQ2RXRllOcGwzQ3dpdnhwQT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "212ba26d-0436-4fa7-bde6-fdf3694d72ea", "record_id": "flaws_cloudtrail:0000424:212ba26d-0436-4fa7-bde6-fdf3694d72ea", "row_index": 424, "timestamp": "2018-08-06T08:00:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1050, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "212ba26d-0436-4fa7-bde6-fdf3694d72ea", "eventTime": "2018-08-06T08:00:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRZFNJQS9MZVM3Rk1icy9CVnE3ZVF0a3BFTU1YRUl1blUwQkQ4enYwcllUNk16cEp5VkJ6OUY4TE8wenZqNGRxdmJPVjM0MUxEVXJIMUxiWDNwemxZd1RFRUJrdzM1K01JWkxaM0NtSHRqaUlhSGhUZzdma2FjQ0lHTk1JUVJQeGREMnZLUTROT2Y2ckk5Q1g1WGJnN29RTWxkcnB0NXNqU2pobitxYzRpRXlJZysvdk85dEZYZnBaUUxoK1Z0UT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3507cfdf-f1cb-4503-89a4-6e8ecadb3e99", "record_id": "flaws_cloudtrail:0000425:3507cfdf-f1cb-4503-89a4-6e8ecadb3e99", "row_index": 425, "timestamp": "2018-08-06T08:00:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1046, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3507cfdf-f1cb-4503-89a4-6e8ecadb3e99", "eventTime": "2018-08-06T08:00:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIwTjZEcEQ3c1RKL2Z3TWt1TlI0WWFXMU8zRkI5UlNOWEY2eDFQaGNLMFR0VlB0Q0NXbDJCeC9yQ2M0aXdRWUp3WVNBa0IrcndiOW5ad01LTUlLTUhaZThCS004S2xXTUxhQTFNcmZ5RkpzamRUL0RYUzBRdEVEWDM4U0U3UXNMQ3lNdHMxdCt3RjF1eDNFR1QwVUlyV3dHK0ZyZlFIbTgxTFgyTWhjaHp0UFRpcEpjZ2tuYVNYRUNkbTFOZyIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2313bdb4-b6ab-48d8-a2f8-96a621eb019e", "record_id": "flaws_cloudtrail:0000426:2313bdb4-b6ab-48d8-a2f8-96a621eb019e", "row_index": 426, "timestamp": "2018-08-06T08:00:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1046, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2313bdb4-b6ab-48d8-a2f8-96a621eb019e", "eventTime": "2018-08-06T08:00:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWdmJwN2tKY0swTkh5TGpFRExJaFJRU2FxMDJyNlNSRnlRREM1STJHTFgvbHBQWjV4WTVqSUNLVGJqaWkrUUpUK0gzcUZPaUFlTjBJMWxUVW1ZVHlPeDIrL1JOVXlTdXdrM2FEYmpSV3FpWm4zdGdsOWEzd0VlT25qb2I1cDBaUkNpMmhEb05mb0llRVA1WFd2bUloR3FleVNJWjJLM0RrVmo3OW5ZcFRad1BDa3ZTbUFnNkp4Y1poaUZNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c9e88cf-13cc-43e6-8ac2-7fae78e0ec2b", "record_id": "flaws_cloudtrail:0000427:2c9e88cf-13cc-43e6-8ac2-7fae78e0ec2b", "row_index": 427, "timestamp": "2018-08-06T08:00:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1050, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c9e88cf-13cc-43e6-8ac2-7fae78e0ec2b", "eventTime": "2018-08-06T08:00:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJPamwvRHlWQWR5SXVYYkd5SkhpY3pHTXZJdUcrNEdBcmoyU2pzUEd5R09vNGR4UTY3UEZBTHc4OGQ4MmhNRkl2aWQrV1lEb3pEOHhIeGxyaE44WXE4UUhBVU9Pb1ozR1BIQW1TYjIvQWRvL2ZOVGgzbnpnZ2JjOHdiREtSVHl4UUZ3a3VUc256QUtiSklTbllseDhaWmNES2RsZFBnS1lLQmZnZ1hQZkdPdGFhdSsrMlVOaXFJeEkxZFc1S0hUYzYiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd13184-d77c-4b3b-91c4-2e61afc264284", "record_id": "flaws_cloudtrail:0000428:dd13184-d77c-4b3b-91c4-2e61afc264284", "row_index": 428, "timestamp": "2018-08-06T08:00:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1046, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd13184-d77c-4b3b-91c4-2e61afc264284", "eventTime": "2018-08-06T08:00:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQNlJYTlpFY2FKRlVOVnYvem1YMXRrRnJkRUtTOGxNeExOMWl2bTRPSU95enlYN3NKWDA0YUVaSXJFNGVvdGM5cndnTHVHWEZPZW1XUVEyeXZiR2duL3Z1eUxsUEd1b0V1blg5RlkrZ1BNUEd3dElXUjRTMmMwT2hRTU9qNDVMT1ZpeWo2UTNnTWx1aHZ5QThJeTQ0bFVycXd3aHpQV3lkSUs5M2hKTm8xelF5NWlkTXU5NlBjZmZLS3RJPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9232bd5-5094-438a-a572-a35bb479ee3b", "record_id": "flaws_cloudtrail:0000429:e9232bd5-5094-438a-a572-a35bb479ee3b", "row_index": 429, "timestamp": "2018-08-06T08:00:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1050, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9232bd5-5094-438a-a572-a35bb479ee3b", "eventTime": "2018-08-06T08:00:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJneXhJdklTbjM5UnFVSk1oYWF2bnliQ1EvRHZSQ2MwaVNTQWdUMkhpa2dsemE5bEU3RW5DM1ZqTEFrK1I5OCtxRHpGNzVtYk1USFIvanJuL1Zyd1NEcVpsUFBjSEQ3cXdHYjZWRGNBVklzRWR2V3BUbisvVithMU1QYzh2WEhDRmtIY3A1cmZaZlA2VVV3ZGxDS21ucUg5a1hmUDdldzFCSUUzallVdlZOOEg5Ym1lcXA0UTBnRm1EQmdaYXI3UT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e386aa2-6797-4d80-949b-dbd6f6c7a0b3", "record_id": "flaws_cloudtrail:0000430:2e386aa2-6797-4d80-949b-dbd6f6c7a0b3", "row_index": 430, "timestamp": "2018-08-06T08:00:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1050, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e386aa2-6797-4d80-949b-dbd6f6c7a0b3", "eventTime": "2018-08-06T08:00:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVcUR1Vyt5c2pOakprQlVIWGp0aEV5M3Y0aDZ0WUZvR1piSmxuYmdkVkNabWpjbU51dlJKZXlIOWUxTm9uS0N2YUZ3eWtrZjlVaTFTNnBlMjFmUXNWM3hsYUdTbU1KOGtETHJmd3VjdS9TMStxdTNPKytITjdtZFdkOE1PaEd1RG96N2ludUg4MlN4KzdQc0ppaC9GQk1OL25ZTGFlNzE2RE1OeW9oVStFSldOR215cldCbmVsTmVVd2V2eHVLZz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c967f6e-97ee-43f7-a3c2-f7d29421f0a", "record_id": "flaws_cloudtrail:0000431:0c967f6e-97ee-43f7-a3c2-f7d29421f0a", "row_index": 431, "timestamp": "2018-08-06T08:00:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1049, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c967f6e-97ee-43f7-a3c2-f7d29421f0a", "eventTime": "2018-08-06T08:00:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSazJFcFZva1p6TGtFVW5RaVlhWDdFOEtvN0pJRzM1NE9BYkRQQjJzSGxmUS9MRllDc2JJeGpOS2txMTJiN2UzbFdKVTlvMW0wYVJGMmNwWnVJb0xNQi9ockN3TURUNGZ3RHlNbWxwUERjOVVNOVV6dFhsV3dremtnVnh4SnE0T2FQaUIxRkVEY2FYdmkwRldacXhCN2dWSHJ4SVFianNiRGZJdWo4cytISlhJeU50eFU2aEVTWThBN2JkSlBQK3giLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0f40ff8-c950-41ed-9f27-df926bc10618", "record_id": "flaws_cloudtrail:0000432:a0f40ff8-c950-41ed-9f27-df926bc10618", "row_index": 432, "timestamp": "2018-08-06T08:00:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1050, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0f40ff8-c950-41ed-9f27-df926bc10618", "eventTime": "2018-08-06T08:00:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0amFUSDZPUE1xTFVFMWtmcnRsb05tVXBwNTJRN0FJOXY3M2liR3Y2QWVmSzFmMGNWOHhQNzFldVlQSUs0SXlOb1NTeWNFQkkxSFI4c3JnZUp3NkhzdWNONnBSZnQ3aFdrS1pZN2FUQXZETHl5WWxGUVBHRGZaQ3N2ejdnd09nY3ZQdDZ5eVhJd0JqdUoyWmtXSFRCSmdIeGtaTmhxSFNTWGgyK1lqdXo1anJnWVBZeWlDbnBNbVdCbzVrOG1ldz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "921720b-ccbf-4908-bea6-49b975d17f58", "record_id": "flaws_cloudtrail:0000433:921720b-ccbf-4908-bea6-49b975d17f58", "row_index": 433, "timestamp": "2018-08-06T08:00:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1049, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "921720b-ccbf-4908-bea6-49b975d17f58", "eventTime": "2018-08-06T08:00:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWZ0NQM3AyZ1dnTUxmdVZYTWNEdTB3UExyVmZ2aHdGWlZwVm50U0I2bnhXQjJVUGRiZG1peCtTdzFXYjA1Vm0wVGVOZkxpYWd5Z0VaT2NXWm94UmlQSnZZazYxa1FNZWF0V3BKcllOVlgxS3B1UzMvbjcvZTM3d0R6TFBZUm1BcExHS083VzNRZGxQOUVVNmhoUFlmUkdVZlhCbjdKamc5TjM2cEpjYWhWdVkyQk8zYjhYNC9lUXhlenRmWTZYST0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a21015-543b-49c2-8676-eca28425fba0", "record_id": "flaws_cloudtrail:0000434:7a21015-543b-49c2-8676-eca28425fba0", "row_index": 434, "timestamp": "2018-08-06T08:00:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1049, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a21015-543b-49c2-8676-eca28425fba0", "eventTime": "2018-08-06T08:00:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvYlM0UUxhbk9ENkNEc2U4bGtOSWo0NUh2ZkRzbFVtcjJPNFI0dUptSzZMT3lRTkdKNWJCTlJTdFh3d0FZaXUwTldHcldyWXNrN0V1ZDhJbCtmWXp1d2I3T0VBWjdTOUpXNGQwK3dYdmNFM1lEaTFndzVVdFhHSDNjd0hHTzBuV2FDM0dUdFkrdW02UTUyWjltQ2dPTExjOE1zSnJaZDNIMXFTMnRFM3FWbHdoeTlBcndwWGVadU1WMmRLWG96Yz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "947f32f5-b170-4c0a-a9db-30b00b2a64b4", "record_id": "flaws_cloudtrail:0000435:947f32f5-b170-4c0a-a9db-30b00b2a64b4", "row_index": 435, "timestamp": "2018-08-06T08:00:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1050, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "947f32f5-b170-4c0a-a9db-30b00b2a64b4", "eventTime": "2018-08-06T08:00:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFTWNOTWlOQm5QUTg3bS9PaTF4YVdxSENyTnlOVVI0VEtjQWJnSjF5M09qNDRyVCtJZWNTZ2syTnEvcmhxSlYyZHlXeG5FNWtwOFMxd3RhL0xhdnVKSWlGNGlqUyt3OEh3NjZUQTNyalZqL1V6VDhleVA4dnJseGltd0FlSHJZMkRPUnBhUGlRWVRXazhRZ0lpQjdHZFNJVWt6aEh5WTJSVFVsY1MxU1NRb1hwbEpxRTNudGYvTWdsMGV6WTZjQT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73b2fd94-0f76-438f-adde-def44057ccac", "record_id": "flaws_cloudtrail:0000436:73b2fd94-0f76-438f-adde-def44057ccac", "row_index": 436, "timestamp": "2018-08-06T08:00:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1050, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73b2fd94-0f76-438f-adde-def44057ccac", "eventTime": "2018-08-06T08:00:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1dUk0VjJaNFk5d0MrSXJFL0h5emhDVDJ5dGc0L2VRRWxSTGRFdi8xdWZxWGxwVmtnVUN1ZlFEQUZoYjVuRnB0OFNkVllQWi9GVGNGejhEMUZvSENBcTRpV1g1dVdBTDZUMzNPR3ZHNGpoVmlobnBjTVRTbnMxcWswY0pHb0xyYmVFb0NQa1hxTVJBa2pZejk2M0tlUzFGcFJvTTR2MlkrNlRBbTBpVy8xTklnVUZyaERtNWRrSy9pY3hkelBIeU8iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13f1d1bc-c3e3-4d86-974e-2176c77cc023", "record_id": "flaws_cloudtrail:0000437:13f1d1bc-c3e3-4d86-974e-2176c77cc023", "row_index": 437, "timestamp": "2018-08-06T08:01:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1046, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13f1d1bc-c3e3-4d86-974e-2176c77cc023", "eventTime": "2018-08-06T08:01:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTMlRNS1Y1OHBwQXplZ1pxN3ptdStRMVk3UjNtTjNFRUdKSnNrRngrWTRiaGtrYjNBelhyak5GS2RuOUxjWUNiZXNscklVRFlqNUx2VjN3SWpQZWVjajc4a1hIQTdFOWNHRHVRc2o2a2JWU2liRDR3U1Jxa0pFM09OQXFZMlp2SnZtRThDRkxNRGFRS2R3QU9YcC96SVptQ1hOL1Y3M0ZpVkN3YjJxR1BHY1orbFNrMTRvSVNMVlVWRlZrPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed9f0ef3-360a-4db8-90df-c4a9e550a9ea", "record_id": "flaws_cloudtrail:0000438:ed9f0ef3-360a-4db8-90df-c4a9e550a9ea", "row_index": 438, "timestamp": "2018-08-06T08:01:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1029, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed9f0ef3-360a-4db8-90df-c4a9e550a9ea", "eventTime": "2018-08-06T08:01:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIyVmRHNUF3VlFSVFR3b0pmNTZkMUs1cC9ReDhVYWJBd0ZLZmlFcm1yTGFMVCtQakxvS2V4RGVwd0pYL0hEWUliZ0JBSlJOVXUwNjdyaHdoQlRSZDc4M3RCWDJpUi85b2FXdG5IMHcrM0o4RlpXMUg5ZGdSNU5vSzVVekFGczRlMXpzQlg0cWxtcnhCNWd1czlhZEVEWVBWU1dmNDhrdkovY0FRZHdPOFRJWDRWMkN1RyIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b63ed37-0d50-43cd-9e65-f243d999960a", "record_id": "flaws_cloudtrail:0000439:0b63ed37-0d50-43cd-9e65-f243d999960a", "row_index": 439, "timestamp": "2018-08-06T08:05:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b63ed37-0d50-43cd-9e65-f243d999960a", "eventTime": "2018-08-06T08:05:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "733d0f32-998e-4e6b-8751-2715f00fda0d", "record_id": "flaws_cloudtrail:0000440:733d0f32-998e-4e6b-8751-2715f00fda0d", "row_index": 440, "timestamp": "2018-08-06T08:05:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "733d0f32-998e-4e6b-8751-2715f00fda0d", "eventTime": "2018-08-06T08:05:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvSjJyNVUvS25JQ24wVCtlT0FyZWE2TEpEbGJMR0daWURDZXZ0d3JtY0RxQWp0Mk5yNk4rSWJIOWJlcHRoSkx5cy85bEszWEF5RmtWRFI1Qkptb2RSSkJJd3VNZVZsREc5S0I3dDdOaENwSCswbVhaeTM1Y3dNNWhpT0hkUGFpV3JoOFlWOTh4Q21LbmFEUVlqOXg0Q3IvUVZuV05RRzRjL3J3elMrZWo2eGJxdXNmbFd3ZjhxN1FNampaMU9HMnlEOXNUIiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "745129-0962-4c61-810d-74169871082d", "record_id": "flaws_cloudtrail:0000441:745129-0962-4c61-810d-74169871082d", "row_index": 441, "timestamp": "2018-08-06T08:05:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1056, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "745129-0962-4c61-810d-74169871082d", "eventTime": "2018-08-06T08:05:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5V2pJNlNVWGhHTi81S0JpK0QyQVZjbTFIV2ZPTkE2ZEptRHg4SUdBbVBOM0gxdUhEUFlSZE5mVDA1RnZwR0xnUGE4YWQwQk9xbWxTbTVnOGFVSkFaSlljRGpBTjlpSDhaUzRBL2hxSlp6SDdUYWloK3UySWlBempCU1B3VEh6STZ0VjN2K2VFcFhsZTFIeUN2SFZjbGFHc2lBRkI3QTNkMVd3emNTSkt4ZExUKzZJNWJrTUwvN0tZbWdqTUpKNnJoekthIiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "567ef97a-3830-47a4-9d5c-e201a2d7c5e1", "record_id": "flaws_cloudtrail:0000442:567ef97a-3830-47a4-9d5c-e201a2d7c5e1", "row_index": 442, "timestamp": "2018-08-06T08:05:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1050, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "567ef97a-3830-47a4-9d5c-e201a2d7c5e1", "eventTime": "2018-08-06T08:05:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvVy9pTnVJbWZJUHRCRytBZ1FTeUZaZWp1OHhwVm5KRXN1NG9WMlF0YnptUnphbC9odFFlbVAvU3VWQkpvODI1ZHVOdDlzczdBdE1GbUEwN1ZZVUJTYmxHYkl4UlpVN3BFTW9tajZtM2N5ZkFHNk1KT0pTZ3Mvc0ZQUWJMa0JGY0xtUXppamNOMFVtVmJrSlZ5OWtQVmpCdk1qMUMvbzFtUWJKUjhxd2dKZFAydUUxYzFuMm5pY2JnaVYyTEZNUT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54a55bc8-0909-4995-a6fe-400c3a4a60c1", "record_id": "flaws_cloudtrail:0000443:54a55bc8-0909-4995-a6fe-400c3a4a60c1", "row_index": 443, "timestamp": "2018-08-06T08:05:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1058, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54a55bc8-0909-4995-a6fe-400c3a4a60c1", "eventTime": "2018-08-06T08:05:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJrOTFqV2NZKzIrVTFuMjlzNnRQcTRZZUs1VjNTdXNYdVBDaFBWMDJWRkRvMkcrenYrczdXaFk3aFJmcXdpdDMzSDJqTDNBbXJabWVkZUh6STVPZkZRL1AwczlGVU5VVkVQTnllVE9SUU9nSExTTUxEbVBETVVYbEladjl2RVF2bjdNUkJNdXB2Ky8veWZkeEJYS2pYOU83clNiSXRUTS94aHZBSUNPYVU3WHplTVR3TlR3ZTYwKzZtcCtGYnBZNlJlYUY3IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "792893a-01a2-4bb2-b340-987f43902a4", "record_id": "flaws_cloudtrail:0000444:792893a-01a2-4bb2-b340-987f43902a4", "row_index": 444, "timestamp": "2018-08-06T08:05:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1056, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "792893a-01a2-4bb2-b340-987f43902a4", "eventTime": "2018-08-06T08:05:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIvalpvbmxwZ0xYTXdyMEdRNk5Ya3BodlZuSk9MeURKUG1nLy8zUnMxSXpER253VGozcDJ0M1A5WjNJdjlqNll2U2grRmU1RHVLZ1lWbmhWTTFUV0ZoMTAwcktFenV6OUQwODZ1dndEM3A0OU1makxqd3R2Mk5HWk5VdHNnTEhRR1MzSWN1em4wT012VUhvSnVXZjZwU2ZHQkNIbHZTSTlIaG9qWGh2S1N0S3d4OUllZ1VNUFVHQW9hclRmVHJDc2xhdjg3IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "279fc0dd-48d4-4a80-bc4d-2897583ee64e", "record_id": "flaws_cloudtrail:0000445:279fc0dd-48d4-4a80-bc4d-2897583ee64e", "row_index": 445, "timestamp": "2018-08-06T08:05:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "279fc0dd-48d4-4a80-bc4d-2897583ee64e", "eventTime": "2018-08-06T08:05:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVRVp4bG05UkNabE1sRU9HamhNNGpOc1pKMnVVT0NRRDFUeVo4bjVLUXp5YnJxTnpGY2k5YzFwZDhUNWtDRU42RERsMGZld20waU1JU0xUYWRwaG1vZlBnNU9rMFZCQkV1ZGJrc1RNYUdJZjVCL2hWU3M5WGlwVUhZd0I4czFmR3dOdXptbHNBS09rTjlNYVlkL0tlOVN4YnlSUHpMbWd0d3ZmTGhRK3dBSDdraFYyTHJ3cUV6YkxTS0dYMDBkMnE0Zz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "606dde7e-ebff-444a-a109-a15952", "record_id": "flaws_cloudtrail:0000446:606dde7e-ebff-444a-a109-a15952", "row_index": 446, "timestamp": "2018-08-06T08:05:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1052, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "606dde7e-ebff-444a-a109-a15952", "eventTime": "2018-08-06T08:05:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4cXJJdGxZZ2ZiSjhJOThJdHBmYUkyUzdTdXIyNGNUd2lTL2s2b0dWUnZyWkVXSEtrNmF6MStmSThtNTgyQlFXNHVxZkF6VFgxRSt2bUJ3WUJMMHYxQjE4ZWVxcUNaa1RER2tGc1gwZ2R2RVRGQ1hqNDdSQnBCTGVkZ2RpamgzcXNaVlR3NjluUStTS1A2Vnh1WkluSVFHT2h1Y1UxNlZkMXR4aHRSbFducmJ1SmM2MW5TbExlekJ5Zis2QmJnUWNTQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d8c89c6-4811-440e-acfa-8423b053d362", "record_id": "flaws_cloudtrail:0000447:1d8c89c6-4811-440e-acfa-8423b053d362", "row_index": 447, "timestamp": "2018-08-06T08:05:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1058, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d8c89c6-4811-440e-acfa-8423b053d362", "eventTime": "2018-08-06T08:05:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0bDc3cTUyODJRYkJ2THpBWU9nblR0RlVQeXY3S2tkaVRHWTdtOE8wc0FRY29IaTNHMXZsaGI1cnhIQllUdGdRck1XSU9lTU5iZkxPWUlzbHAwaU9qcTZZVjk0MG91WFAvM2V2NDAzTlk1VFRaZ0tyMi9QS3E2UUlzRUQ0YVBaMklBclVzT20wZk1TS2F3bWJ0d2RCaUM2ZXVvUWtIdytFMHpjOVB3VXRGNVFmbDZ3TDg0OTJZcldtWmxJcVpvUDJGdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa02437-ba21-4d45-a399-65529e4", "record_id": "flaws_cloudtrail:0000448:aa02437-ba21-4d45-a399-65529e4", "row_index": 448, "timestamp": "2018-08-06T08:05:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1044, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa02437-ba21-4d45-a399-65529e4", "eventTime": "2018-08-06T08:05:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJocEJOYVQyckRwcVc5RlMxVHFiTGYyTFV2dDhDaUh5K1BYRi9iQUN6QkJlN0huQTluWGFBY3VucENLN1Fld0l2NHVHUU1pYlZURm00QTZNOGpvR3J2RUE4NnAvMm9tTWdSK0M1NU02UlFUQk1Xa1NGd0NVeEsycjFKR1ZhbjZUakoxMDFCZ0lnZTdMUWg1cy91eW03clpOZ2djOGl4MXA5SXc5elFxNzNoYm96NGRUZHlGci9jK0tFMHpjWW9pRUoiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c630022-b739-4a35-a09b-42b92906f74d", "record_id": "flaws_cloudtrail:0000449:2c630022-b739-4a35-a09b-42b92906f74d", "row_index": 449, "timestamp": "2018-08-06T08:05:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c630022-b739-4a35-a09b-42b92906f74d", "eventTime": "2018-08-06T08:05:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRcHpjVHUySm5Bd3NVK0Z4bVhFQVBqU0FNRkF4V2YveXYwUzMwSHhDYjRkMkxBNXk4eGl4Z3JrQ2tOcDQrZkNJL2V0aE5ubGNHLzB2cWtHUVBSbFBNaDJFTEZpVW1uRkdKMTJ6bzFmUlFyRXF2MmZEVVJDakNIcDdvVDZqcFFWUWxlL0pveGJGSnpHRDlvY0VWL3Y5NVI1UzRRcXV3b3BIYVpQZ2ZKdmJJMHVSb293bTIzQ2hoUzhlQkZZL2E3ZEV5ci94IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5996e28c-38e3-4e66-acc6-32c5359a99d9", "record_id": "flaws_cloudtrail:0000450:5996e28c-38e3-4e66-acc6-32c5359a99d9", "row_index": 450, "timestamp": "2018-08-06T08:05:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1056, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5996e28c-38e3-4e66-acc6-32c5359a99d9", "eventTime": "2018-08-06T08:05:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2TkwzT2RZeHZzdDRNc0JWUjV1a3ptSnVicFN1RjNEUEhtUjRhNk90bUNWWkFMZFFkVzg3QXBOTFp2NC8wL3dDUEp6TUUvQkcxMmNYYzdTL2FwWHhXdUx1S24rYk02V3VlTTRRK1lFV3dLZVhMU0JaK2Q0Tm1aL1F3Zm5lU2k0WlpYSG5maEs5Q3MzdFUwVXBSZVNhU3ZCMW8rdXAzaDBtbzVvWFJJeTFjZ2wzRzIybGQwdHl5dFk4NWtVa2ltdmZ3bDM3IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5577f66e-0346-433b-82fd-74dd631add97", "record_id": "flaws_cloudtrail:0000451:5577f66e-0346-433b-82fd-74dd631add97", "row_index": 451, "timestamp": "2018-08-06T08:05:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1058, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5577f66e-0346-433b-82fd-74dd631add97", "eventTime": "2018-08-06T08:05:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0aWZ1bjZ5OTZLQ09FNXFSSWxDZlNNK0V4OVBaZWZxSlJPOHdGQ2RsYnVYZmNBNzk4Qys3TjFFUEVlN1RjY3lad3I5YTNZQWxFcytBSlhueFZ0MUpaUGVNdXhZT25IbEJsTVVvRm16UUtlTXBYQ2NiRGdwMWJtdWJoM3IyT21wbXFtRlRqRW1BZExYVGw1WmdEbkZ6VnJaTVNGSFlDak5EYnYySGZoRGY3Ukpkdjg1ZjN1VnRpNG1QNmZZeGZJVWhnSzZ3IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1e72ba5-50c9-405f-a98e-c9f2b31f3309", "record_id": "flaws_cloudtrail:0000452:c1e72ba5-50c9-405f-a98e-c9f2b31f3309", "row_index": 452, "timestamp": "2018-08-06T08:05:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1058, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1e72ba5-50c9-405f-a98e-c9f2b31f3309", "eventTime": "2018-08-06T08:05:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkcG53Y3gyeElSWUIrY1l0cnk1YU9hWXpBQmdsUWV3VVJSbmlDSnh2cE1EL0pGcTZNUVdnK25kTmZNekVvZ285VWZ0THcvck0wZUx0cWtHMlFSQXpnbW9lQU9WRlkyUTM0MHhJNk9NWm9uWXg4am5DK2RSYmNCYjF3b1Vqak9SYzdXbDcydnZxcGpDN0tyRExjaUk0TE02ZjIyckJqekpiSzQ5VWVxQldrTkhWZmZMZFcyR0pYemZQUFdxc2hWUjVXK2lmIiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c24746-df4e-4c63-9b18-04d8392f52e1", "record_id": "flaws_cloudtrail:0000453:c24746-df4e-4c63-9b18-04d8392f52e1", "row_index": 453, "timestamp": "2018-08-06T08:05:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1048, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c24746-df4e-4c63-9b18-04d8392f52e1", "eventTime": "2018-08-06T08:05:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTdDh4UmJTb2x1bTlGZXFLMVNQdi9RbXZ2bkZwazg3S2k4c1pDdjNLVVdiMnYrYkFuTkRQc1g3M2V5MWFwUDJGaWkwTVZONnQxUDVtMTR2RXFKQUtza2lKQlN2eEUyY0lacVQ2SUZjTVdiSmpCNk9SY1Q4b3pmclpKd25aZ1JnSGJKMFB6YVhJbVB4Mkc3WTNPZnhrcFZ2amNnUDl1bDlWandZTDlmOVNFTlJiRTVVRE1KK1pDZW1Ddjl1eXdPWT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb393b94-6e28-4703-b6a6-a2fc576b4f6e", "record_id": "flaws_cloudtrail:0000454:bb393b94-6e28-4703-b6a6-a2fc576b4f6e", "row_index": 454, "timestamp": "2018-08-06T08:05:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1051, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb393b94-6e28-4703-b6a6-a2fc576b4f6e", "eventTime": "2018-08-06T08:05:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0cGZETzNCc1VRcGhkazM5ZWRDbHBiUzhuMDZ2QU9kZHpBekdHN2tUOGZhbWpLeG8rbUpNb2RVNXpUWUhJWEc1c0hSUDlCMnp1WUt6cFpySWFQQWdKMmV3SzFRMjFxbU5yNXg1YjRqUDFIYnczSFRhQk1rUHhJTlo3SVZPUVgvbGVPeU5LNTJReWxsZVFod0puSE9zeWN2QUtjY0tQZ3AxTFhNRmJ6d3VRNHU1V3dVOUQ2WjFocExibjhoUXVCZytFQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc7549a1-beb8-4d2c-9f55-96dc5fd0372a", "record_id": "flaws_cloudtrail:0000455:cc7549a1-beb8-4d2c-9f55-96dc5fd0372a", "row_index": 455, "timestamp": "2018-08-06T08:06:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1034, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc7549a1-beb8-4d2c-9f55-96dc5fd0372a", "eventTime": "2018-08-06T08:06:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJramgvVU1YcmJrL0N6cVRXNTBVRDltN2NYdVFmeE9SV0RpSzFhbFpSWmE1Nm5xekt0VlJJR2JzdnVGWE95MnJsM3c0Vk9zMU4ySlpWMms2eG9aVWYzclRTYTZjNmZ3SUpWUnFLQUtzT2Z3UUFWWTE0WmI4NzJyYnM4ZWVRNklnREQ3VC9xTkdPRS90VFdVbUhBK1ZXSW9WWU1zb216aWVkMHduVFlpY2lIRVRHdTcrQ1MydTIiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33a5311e-1609-431d-a8ec-11891ab578b2", "record_id": "flaws_cloudtrail:0000456:33a5311e-1609-431d-a8ec-11891ab578b2", "row_index": 456, "timestamp": "2018-08-06T08:06:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33a5311e-1609-431d-a8ec-11891ab578b2", "eventTime": "2018-08-06T08:06:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIyZmx4L29GcEpLRWkxdm9sZCtYdTM4K2lWamF5blEzbjBtN0czd09PcHFlU0NGL1ZsbkV6b1FJcDkycUpIcEEyS1FaV3psOUR2WkJOVkJrRG43K0JHZ2owaGpDeVJrcmp3YS9Td0hQSGFvM3BzQkZEaTVSWWd5VkEwaEJNTTJGM2hpQXFUZzBuUEplUEUxSFJVekpGSEZ3bXRFLyt6Sml5WVlBN1ZlRHVnQVJ3OU1sT3hjTnFaRExZZFVZeit1RnRxZkdtY0g2RzF6TTRDV1dRK0xVL0RRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe64ecea-a972-43dd-a812-258e5bee5f98", "record_id": "flaws_cloudtrail:0000457:fe64ecea-a972-43dd-a812-258e5bee5f98", "row_index": 457, "timestamp": "2018-08-06T08:06:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe64ecea-a972-43dd-a812-258e5bee5f98", "eventTime": "2018-08-06T08:06:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwU3BXak82UVRXc2w2RDgxdXoxYVpHQ2RKdENqdThBcG5oQjhjQWxkRDUyMVVEV2JMcldPckFnOS9jVStSNUJvQUV6TmlEclhuT1BxMzljVmZuS3k0RU1MM3RMRUxSK3JncGRrTDVkWlE1S0dxMW5BUXFDeEc4VDJ6RFFkTnZPdHM0Mmd0UDNuaGE1TmVveGhIaTlzQ1M3U3hQa2lZN1lFYlcrU0txWVJ3V2FIaFJNcmE4VXRrZEZpbG1QbEkwRTU5UGRnTVNGWGRWQzZnUUwyWHd5dThRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3074b594-a0b7-4ec8-8e94-47b8dd4a1bdf", "record_id": "flaws_cloudtrail:0000458:3074b594-a0b7-4ec8-8e94-47b8dd4a1bdf", "row_index": 458, "timestamp": "2018-08-06T08:06:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3074b594-a0b7-4ec8-8e94-47b8dd4a1bdf", "eventTime": "2018-08-06T08:06:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzbnE0WWdwUUNmTTJQdUVyUzd2M3dNVFNQY1IvYXlmNW56TGhBV3FvL0txV3dyZDZkc1Q2Yk94ZUJLRVpxTDJITi9ubmJ3V0tEcUtMUmdyZmh0aGxyL3BRT2oxanZFdzJFUmlZejYzT055elR3aEsvODlURkNqYnVIN2c4ZkZYRERHZkVFU1hxdUlUOUlCMXRUc0YyNnhxcDBuUjc1MERIL21lNTBMb1JCcmdQcXpiUVhka2VDOG5hVElOeS9hbzVHOWMrWVNlZGFoWVNnQTFvVUUvMkZ3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74d322bc-2963-4d5d-b50f-8582eb15c914", "record_id": "flaws_cloudtrail:0000459:74d322bc-2963-4d5d-b50f-8582eb15c914", "row_index": 459, "timestamp": "2018-08-06T08:06:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74d322bc-2963-4d5d-b50f-8582eb15c914", "eventTime": "2018-08-06T08:06:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0NE5GT2E0dmNBb2l1ZTVDRVVYTkVsUkRhcjNqeDNMd2ZBUXNPTHUvQXREY2NKV2ducVJGZ1ZWWm1lbFl2MXVHOGMyaGFIazA1bWVDbzB2bzBmVVo4dXdBMmR0cGRFZkZrUHZjcTFyTUErRmF2Z0gxM2lqZ2I2ZEJLSExodTV0SU5YNFNid1lqZE9UVktkTUJHNEZqQkdoR0hZSFpwM3Jya1dxNG1HRkFDK1hUMDVkUFJvdHRJQ1EwTXJXRERHdFNTeExDNHRjQjRWaGpXbXE2Uy9xVFZRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46900-fcff-43fc-b935-c2be89f1b578", "record_id": "flaws_cloudtrail:0000460:46900-fcff-43fc-b935-c2be89f1b578", "row_index": 460, "timestamp": "2018-08-06T08:06:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1079, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46900-fcff-43fc-b935-c2be89f1b578", "eventTime": "2018-08-06T08:06:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXdk9weDF5K0gvWGdINlFFS3ZGOXVqalNaV3krTHlZRGJlcUpiaVkwUkNrY21haDdmdnk3ZzVDQ2pPRHNtVHNVcWhBVkJmN3A2WlBPb0hqQ2RjR0FLNVFhUktLVTk0Q1g2Qi9WbWhQK0dCN1NzWTdLMXd2V2l4TmxXY3hYajQwYktqdVlpVWtMbzNFMUlwdFhyc09lcHJMTkpjY1F5TVR4NWN1QkVjSWpSMXpLSEFPNXI1OFQ2RGcvWTBNTDFEY0hzMUk1eDUyQ0NZTm9QRk93WE1jNmhBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a49ba88f-b3e7-40a6-8522-2e9f3b95d47b", "record_id": "flaws_cloudtrail:0000461:a49ba88f-b3e7-40a6-8522-2e9f3b95d47b", "row_index": 461, "timestamp": "2018-08-06T08:09:55Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a49ba88f-b3e7-40a6-8522-2e9f3b95d47b", "eventTime": "2018-08-06T08:09:55Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "983368d5c-ed90-45b7-9f14-8b5c780436d71", "record_id": "flaws_cloudtrail:0000462:983368d5c-ed90-45b7-9f14-8b5c780436d71", "row_index": 462, "timestamp": "2018-08-06T08:10:54Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "983368d5c-ed90-45b7-9f14-8b5c780436d71", "eventTime": "2018-08-06T08:10:54Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5bd6d79e-aea9-4a88-912e-8b4a23eedde8", "record_id": "flaws_cloudtrail:0000463:5bd6d79e-aea9-4a88-912e-8b4a23eedde8", "row_index": 463, "timestamp": "2018-08-06T08:11:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1493, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5bd6d79e-aea9-4a88-912e-8b4a23eedde8", "eventTime": "2018-08-06T08:11:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAPNU29DXJI8LZ5Z7P", "expiration": "Aug 6, 2018 2:35:38 PM", "sessionToken": "FQoGZXIvYXdzEJL//////////wEaDNXZjkHL+o+glXG1tCK3AyTTiRKNELx/x02HvhM6vU4naKeaU8Aaa0RR716rFl3xW3hrTfrPIP+t/Hzo3VGbPrw8WaXO8n8D6gkcRX7wT6Mu2zQ2l5ACEkp74JO2qPI5SlhE7TkJqYsWuV7mG1MT+AsbL+zPRkAge+SkYPL3cg2nwhN6pvjnZFesgQ3YPAkGl2bBov/l8yPrjaVLvgW3Aw7c1UcNgZp0MtXECoLoHDskySsZ25AT0Rj1XmNgB/nnOtgalQN0XxtVVE2TmTcUsU/1vEWVNkY7vT/439fLqxp5EhcAP4j1uqeAz/vzMSVWITYdhsdNyoF1iPaFBmSFOqyXic3DYhPd1pGKSSuzB6lNq6cwB1Zio00EMyoFaMxmCHlA4LYusHu9JAw7Gka4UD2Vk0LWnMfu1Zf1hF9KJZKKF4Ufgr3LoAvjJ1qA0OL/zd0IeY51EX7duPigzlmoWRfi9EdDu+bpVrfS0eFnD/PBKZBySHLUesfcx6zykUmVNlogLZdgevnaR98RBnMRn4LOZ8A1WyzCJcfJNz26mE401ayJrha5xZITZIfQF6KivQFGCvWPqGSpzIHwO3/gXZc/FlaP1FcoyoWg2wU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ced4ac62-d790-483b-8468-02f81140d", "record_id": "flaws_cloudtrail:0000464:ced4ac62-d790-483b-8468-02f81140d", "row_index": 464, "timestamp": "2018-08-06T08:12:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ced4ac62-d790-483b-8468-02f81140d", "eventTime": "2018-08-06T08:12:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "434cc6fb-daf0-4812-98ba-77fe0c4e0f68", "record_id": "flaws_cloudtrail:0000465:434cc6fb-daf0-4812-98ba-77fe0c4e0f68", "row_index": 465, "timestamp": "2018-08-06T08:13:44Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "434cc6fb-daf0-4812-98ba-77fe0c4e0f68", "eventTime": "2018-08-06T08:13:44Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06f2db2f-67a6-4b4a-8c8b-4b5e8d5bbe3a", "record_id": "flaws_cloudtrail:0000466:06f2db2f-67a6-4b4a-8c8b-4b5e8d5bbe3a", "row_index": 466, "timestamp": "2018-08-06T08:14:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "246.5.45.4", "user_agent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06f2db2f-67a6-4b4a-8c8b-4b5e8d5bbe3a", "eventTime": "2018-08-06T08:14:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "246.5.45.4", "userAgent": "aws-cli/1.15.30 Python/3.6.5 Darwin/16.7.0 botocore/1.10.30", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "074b2903-998f-491e-8f8f-96d113da2612", "record_id": "flaws_cloudtrail:0000467:074b2903-998f-491e-8f8f-96d113da2612", "row_index": 467, "timestamp": "2018-08-06T09:11:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1493, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "074b2903-998f-491e-8f8f-96d113da2612", "eventTime": "2018-08-06T09:11:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAL93W71VTFSUF3ACZ", "expiration": "Aug 6, 2018 3:47:46 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2eab8181-ee29-49e8-b256-7cab77f3a8a1", "record_id": "flaws_cloudtrail:0000468:2eab8181-ee29-49e8-b256-7cab77f3a8a1", "row_index": 468, "timestamp": "2018-08-06T09:13:07Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "182.1.251.251", "user_agent": "[aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 643, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2eab8181-ee29-49e8-b256-7cab77f3a8a1", "eventTime": "2018-08-06T09:13:07Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "182.1.251.251", "userAgent": "[aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59ccae10-1744-47a3-9601-9ac513c6443f", "record_id": "flaws_cloudtrail:0000469:59ccae10-1744-47a3-9601-9ac513c6443f", "row_index": 469, "timestamp": "2018-08-06T09:35:07Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAAM1WHOBRQPPIUFJA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.217.100.214", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 536, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59ccae10-1744-47a3-9601-9ac513c6443f", "eventTime": "2018-08-06T09:35:07Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.217.100.214", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAAM1WHOBRQPPIUFJA", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58a13827-74d1-4cfa-bd79-65ad7efb183c", "record_id": "flaws_cloudtrail:0000470:58a13827-74d1-4cfa-bd79-65ad7efb183c", "row_index": 470, "timestamp": "2018-08-06T09:36:20Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAAM1WHOBRQPPIUFJA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.217.100.214", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 540, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58a13827-74d1-4cfa-bd79-65ad7efb183c", "eventTime": "2018-08-06T09:36:20Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.217.100.214", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAAM1WHOBRQPPIUFJA", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f9aedfc-ef0e-4804-a64f-5acd5f5751d7", "record_id": "flaws_cloudtrail:0000471:2f9aedfc-ef0e-4804-a64f-5acd5f5751d7", "row_index": 471, "timestamp": "2018-08-06T09:39:39Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAAM1WHOBRQPPIUFJA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.217.100.214", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:cloudtrail:us-east-1:811596193553:trail/trail-7848"], "raw_record_size_bytes": 665, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f9aedfc-ef0e-4804-a64f-5acd5f5751d7", "eventTime": "2018-08-06T09:39:39Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.217.100.214", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAAM1WHOBRQPPIUFJA", "userName": "backup"}, "requestParameters": {"name": "trail-7848"}, "resources": [{"ARN": "arn:aws:cloudtrail:us-east-1:811596193553:trail/trail-7848"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05f6b810-4db8-4049-b336-f26f05ffbea0", "record_id": "flaws_cloudtrail:0000472:05f6b810-4db8-4049-b336-f26f05ffbea0", "row_index": 472, "timestamp": "2018-08-06T09:40:48Z", "event_type": "StopLogging", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAAM1WHOBRQPPIUFJA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.217.100.214", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:cloudtrail:us-east-1:811596193553:trail/trail-7848"], "raw_record_size_bytes": 662, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05f6b810-4db8-4049-b336-f26f05ffbea0", "eventTime": "2018-08-06T09:40:48Z", "eventName": "StopLogging", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.217.100.214", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAAM1WHOBRQPPIUFJA", "userName": "backup"}, "requestParameters": {"name": "trail-7848"}, "resources": [{"ARN": "arn:aws:cloudtrail:us-east-1:811596193553:trail/trail-7848"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7b05236-6ea1-495b-a3e4-6141038c619e", "record_id": "flaws_cloudtrail:0000473:d7b05236-6ea1-495b-a3e4-6141038c619e", "row_index": 473, "timestamp": "2018-08-06T09:41:50Z", "event_type": "UpdateTrail", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAAM1WHOBRQPPIUFJA", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "155.217.100.214", "user_agent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:cloudtrail:us-east-1:811596193553:trail/trail-7848"], "raw_record_size_bytes": 721, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7b05236-6ea1-495b-a3e4-6141038c619e", "eventTime": "2018-08-06T09:41:50Z", "eventName": "UpdateTrail", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "155.217.100.214", "userAgent": "aws-cli/2.0.30 Python/3.7.3 Linux/4.14.181-142.260.amzn2.x86_64 botocore/2.0.0dev34", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAAM1WHOBRQPPIUFJA", "userName": "backup"}, "requestParameters": {"name": "trail-7848", "isMultiRegionTrail": false, "enableLogFileValidation": false}, "resources": [{"ARN": "arn:aws:cloudtrail:us-east-1:811596193553:trail/trail-7848"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d43d09c8-1fce-4e73-9f77-009ca6d8b603", "record_id": "flaws_cloudtrail:0000474:d43d09c8-1fce-4e73-9f77-009ca6d8b603", "row_index": 474, "timestamp": "2018-08-06T09:44:47Z", "event_type": "DescribeInstanceStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "182.1.251.251", "user_agent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d43d09c8-1fce-4e73-9f77-009ca6d8b603", "eventTime": "2018-08-06T09:44:47Z", "eventName": "DescribeInstanceStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "182.1.251.251", "userAgent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}, "includeAllInstances": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "925830b2d-1288-485a-9a09-888a552b5c16", "record_id": "flaws_cloudtrail:0000475:925830b2d-1288-485a-9a09-888a552b5c16", "row_index": 475, "timestamp": "2018-08-06T09:46:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "182.1.251.251", "user_agent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "925830b2d-1288-485a-9a09-888a552b5c16", "eventTime": "2018-08-06T09:46:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "182.1.251.251", "userAgent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0cf3d4c5-b91f-4c99-be36-4d2c4cdd58f6", "record_id": "flaws_cloudtrail:0000476:0cf3d4c5-b91f-4c99-be36-4d2c4cdd58f6", "row_index": 476, "timestamp": "2018-08-06T09:46:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "182.1.251.251", "user_agent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0cf3d4c5-b91f-4c99-be36-4d2c4cdd58f6", "eventTime": "2018-08-06T09:46:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "182.1.251.251", "userAgent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSaXJNMFNScUtuRy9MZzc1azJYUno5cENhUkdOTHlrQ25ybUpnNDJ0czViUVlEWW01b2FsY1hJSFNVZzVlMWVLdGNGaWZ3ZXhieG10NFBJRmNXSWFxT09uTXMwbnZ5WUcvY21oTGRSRytPaFlXTXVQeTBtL21mTTFqc1c3b0pTNjE2bzBTcHlMQlp4SGlhMkVJbDJqcS9kYk5VZW5Yd2lJV3pnVW02YlRNZkt4bWlXZDIvK2ZLeDZENHdEczhWOVFhZ2JsIiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0bd9943c-f714-4278-b89e-e59770c799e8", "record_id": "flaws_cloudtrail:0000477:0bd9943c-f714-4278-b89e-e59770c799e8", "row_index": 477, "timestamp": "2018-08-06T09:46:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "182.1.251.251", "user_agent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1061, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0bd9943c-f714-4278-b89e-e59770c799e8", "eventTime": "2018-08-06T09:46:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "182.1.251.251", "userAgent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTUjRRZ2VVZVJ5Nkg3TkJYQUc0aDg0MS9lRFhNL20vRk5PZXhLRjIxYTVHVmd2cGpyYWhEVXIyOU9wendmNnRqV0djc095Q1lmUnRIL1lLNldWcGpkRVdSVTIrM1Z5YTBlRjMyMkM4MDBBSUdxVE9DakdnU01xV2dwQnlJdE5HNitLS2xocVBEUTdjUGNrUm1SOC9OMGsyeWtPY015bGdLRVJnUFpwaXRsSDRYcFFkWHE2Ri91RjY2V1dVU1Q2eHk5RmF4IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ba5ead4-e058-4220-aae9-5e147ef72d80", "record_id": "flaws_cloudtrail:0000478:5ba5ead4-e058-4220-aae9-5e147ef72d80", "row_index": 478, "timestamp": "2018-08-06T09:46:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "182.1.251.251", "user_agent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1053, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ba5ead4-e058-4220-aae9-5e147ef72d80", "eventTime": "2018-08-06T09:46:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "182.1.251.251", "userAgent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzeXN0Y0c2dUU1b2VjSUFMVGgyTEthbE1mM3I0NDhTc2Z6ZWtKM1VKZUMzQkYyRDZOaldxSG1laGFLNCs4azU0bEdFTldLL0d6UmZ0SzBEZ01jUEluU3dxU3hZRGduTC9WKytRb25qL3ZwYlU2VUZpTjdwdUl6OFBvTDE1N2h6MW8wNHJnRUoyNWlLelpGRC9paWl3T0NwT2E1bEN0K0oxSjRqbDJxV1RXbU5NeU1pQ1BrRXZnMWptczBFU0lPZz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b67efdd-1862-4952-a29e-104649d46435", "record_id": "flaws_cloudtrail:0000479:7b67efdd-1862-4952-a29e-104649d46435", "row_index": 479, "timestamp": "2018-08-06T09:47:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "182.1.251.251", "user_agent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1061, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b67efdd-1862-4952-a29e-104649d46435", "eventTime": "2018-08-06T09:47:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "182.1.251.251", "userAgent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzNzJpcEtOTTBib3N3VDV1YkVUbFlxa01RS3QrWUN4NDVyS1g1dnNjelpZMm9EWUU4YkIvbE53OWxyeS9pS0hYTkQ0YksweXgzVlpVSjFSelJIRkdhbkp4eXNoUTZ4NmFpekVNUUxZUkZzbGJNdWp2NVNUWlhXNlVFRWtiSGZaS0FjNkpUVHcvNHcxNnVmQXNaMG9IWGFoeVl4eG5ycVAyWjF6T2pSQXZsUnZQbGZHaXZBeW5FOTQvUVNFV3luRlRDUmc1IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc9505cd-4915-49f3-a497-60b39fb76725", "record_id": "flaws_cloudtrail:0000480:fc9505cd-4915-49f3-a497-60b39fb76725", "row_index": 480, "timestamp": "2018-08-06T09:47:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "182.1.251.251", "user_agent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1061, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc9505cd-4915-49f3-a497-60b39fb76725", "eventTime": "2018-08-06T09:47:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "182.1.251.251", "userAgent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJyOFVjdm9HU1cvQkl1YWkzR2Q4ekpzQy9CSUtGR29xV3VtUjZlS2JYaTl1dlRiM0UvV2tpSGlxTmx0MmJNb1JNa0FmbjR4YlFuMmVqREgvVEpJVm5rYThFZHFLUGVvZWI1eDAzYnkreVV4UnlJZnRzdFVieFg0VnBRNmdKS1VCbm9vUFdrczVSUmswVUZTOG81Q1EzMy9lZE1ZeEg5b1VtYzVOQ1NlaTZ5MWV4NlBmejBxcmJPQ21PQ1R6eHY0S3ZvSmJMIiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "869efdce-6dbe-4c83-af88-6be3ff15f032", "record_id": "flaws_cloudtrail:0000481:869efdce-6dbe-4c83-af88-6be3ff15f032", "row_index": 481, "timestamp": "2018-08-06T09:47:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "182.1.251.251", "user_agent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1061, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "869efdce-6dbe-4c83-af88-6be3ff15f032", "eventTime": "2018-08-06T09:47:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "182.1.251.251", "userAgent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiNE5lSDh2RDZNYWNKMkgvdVpoRzlKSmFhc3ZyMmJ1eUovSjJ4R09Ob3NzcE83SENvZ0tOUmxKRWxhTm5RZ2ZBSm16VWlYV1ZqMjFuam1GemFMR3pVZXVHenU2NHRoSXo0aHBSK09CNXlFdVN2WmhlbHBuVGpNaEpvQ2NNcmFTUkZVQU1nSnJDT0s0M3BNZTNZaUdLS1JzYyt1cXozTTdEK0hnZTJ6RnhBZmVyQjV4aktZWmhPOUtQSWFIVSt6WWtIUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53af04ce-2344-4e37-a844-c512bcd5fd3b", "record_id": "flaws_cloudtrail:0000482:53af04ce-2344-4e37-a844-c512bcd5fd3b", "row_index": 482, "timestamp": "2018-08-06T09:47:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "182.1.251.251", "user_agent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1057, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53af04ce-2344-4e37-a844-c512bcd5fd3b", "eventTime": "2018-08-06T09:47:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "182.1.251.251", "userAgent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzZ1c2WGw4T1BXOTdMWlNSOFRKYWFUM3BMSmpKSEY1S3ZKUEZYa2E4amlkN3JoYzgyNmU3R0s0dW1aQTBTbitMMEhtTndVbXkrZ0ZjM2UwWW93NjYxM1c1dkwwNlBya01FQmd6UkFwRWlLSnNEVWRLcTF1NEl6SGptQVNsYUUycDVmd0ZPUEJrSjNkeUZGRUppYkU0ZnUwc2gvUHNReHg4Rzd0UXg1QWFVWUlQN0NuL2d3VmV3ZUJTUVNjbngvWUJXUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aeb10aef-1f43-429c-9ba2-2ba1b04e4a00", "record_id": "flaws_cloudtrail:0000483:aeb10aef-1f43-429c-9ba2-2ba1b04e4a00", "row_index": 483, "timestamp": "2018-08-06T09:47:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "182.1.251.251", "user_agent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aeb10aef-1f43-429c-9ba2-2ba1b04e4a00", "eventTime": "2018-08-06T09:47:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "182.1.251.251", "userAgent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3286ef9e-c8b9-4c8d-8cf8-3b84a2e566601", "record_id": "flaws_cloudtrail:0000484:3286ef9e-c8b9-4c8d-8cf8-3b84a2e566601", "row_index": 484, "timestamp": "2018-08-06T09:47:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "182.1.251.251", "user_agent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1061, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3286ef9e-c8b9-4c8d-8cf8-3b84a2e566601", "eventTime": "2018-08-06T09:47:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "182.1.251.251", "userAgent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjT0ZUem9VLzhkTi91T1lsQ094UlFqcytXb3I5bjc5TGhDZzNZSmNPUExlTGNXVkRrNmFZcG5CdEtFajRHalh3WlZTTEhIZTdmZGJaZWhkb21lRVJpUEIvUHJJdDZjRVBsZHNZdzdoMFBvemVMNTNTODRnR1dEWG5iSm1ySVNITXZXblVGcm1ma3NpZlJFbzQvN2pNeDlPYWlMeHB5RXJBSUZTRmJWdmRHakxYWU5nb05QNnVkcExoU210WDIvdXVzM2Y5IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6367f7c9-8917-4d72-85bb-aaad6adaf318", "record_id": "flaws_cloudtrail:0000485:6367f7c9-8917-4d72-85bb-aaad6adaf318", "row_index": 485, "timestamp": "2018-08-06T09:47:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "182.1.251.251", "user_agent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1060, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6367f7c9-8917-4d72-85bb-aaad6adaf318", "eventTime": "2018-08-06T09:47:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "182.1.251.251", "userAgent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJRU2RoQXBZRTRSdUFCSFpKRUhXSmhyMHlDK1BoL3ZSNzA3YXYyQ3JXK1hiKzhUaVM0SkRrT1dlc09YOW52M3h4c3pJR0c1cEVvZ0U0WHE5cjk3UkJaak1Nb2ZwTDJDSVNVUXk5MHhIeWpBdXN6OHUwdzMzaU1mVndtR2puVkVTUlg0R1NpT1hjSjhvblB6b3hJQWYyaGU3dnFNYU1PbEVKK2xiMU9kNCt1YitoTlI3ODR6THp5T2wzWituSGlkZjJxTHliIiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "edfc1bab-4cac-4523-b231-adb7cbe2deac", "record_id": "flaws_cloudtrail:0000486:edfc1bab-4cac-4523-b231-adb7cbe2deac", "row_index": 486, "timestamp": "2018-08-06T09:47:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "182.1.251.251", "user_agent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1052, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "edfc1bab-4cac-4523-b231-adb7cbe2deac", "eventTime": "2018-08-06T09:47:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "182.1.251.251", "userAgent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4aHhmNE9Ga3loN3I2dTMrZ0UxL1krWG4rd0IwTHpDVFdScVJWemVVZ3JIYnJISWNGOFNhV2UvMWQ0VS9zZXdDc250VTMyMWRpRUVGV29qVndBR0h6ZkV0anJoS3pBb0NHZ2k4N2JjSHZxT29ZaytlbXhianFEc3F5SHIwRm9OZmRka3ZrQW1SL3hkTHdKNCtvcnZWdERrUXU0YzRjM3pQK0RGOVYxU0tlV0w4MGJiQXB1Z01YS3ljcGg0Wlpqdz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57b8e027-b7f4-4f74-874c-526d21957cc0", "record_id": "flaws_cloudtrail:0000487:57b8e027-b7f4-4f74-874c-526d21957cc0", "row_index": 487, "timestamp": "2018-08-06T09:48:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "182.1.251.251", "user_agent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1061, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57b8e027-b7f4-4f74-874c-526d21957cc0", "eventTime": "2018-08-06T09:48:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "182.1.251.251", "userAgent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ2ekIyeFBTQVVuZWJRNk1wY3hQTVBMWXlkejhTL1pJWFAzWnpHNEZmYVNreXQ0OGFSWlZNcGVKckppWUovZkJtaHBYVjV4Q2pWZXV1YVNCdVQ4U25pTzhrd1htSVFjYzBpYU1SNUdORVJFWXZZNVRDbU1XVmQxbHptVEY3TU9VQzVRT3ZSNktGd2Q5cStoYnRDYjYwUVBRUE1YQU51QU9xblZsSUt4OTJ4K0VyaEwyNjBERnV1blRjeitRNWFpU0VXVi83IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cfff64fb-eb63-4662-97a3-dffc600ef12b", "record_id": "flaws_cloudtrail:0000488:cfff64fb-eb63-4662-97a3-dffc600ef12b", "row_index": 488, "timestamp": "2018-08-06T09:48:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "182.1.251.251", "user_agent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1061, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cfff64fb-eb63-4662-97a3-dffc600ef12b", "eventTime": "2018-08-06T09:48:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "182.1.251.251", "userAgent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJReHZWWFl5dTMzMHZzZnNYMHllS3RuQ0tid2dhVVBuSHkyMlh6MEhWUkRNSzN5MWxsVmFEcm1hWUNDTjBmekFBYXZNbnB4QU5VMTkxYVNVQitpVEVtVklyQmhvelY5Z3grQk9qWDh6V3ZQazF4TkJ0N1VuOG9WcUpEZjVSN0VaS21yNm12WXlvU29ZZUhReU9sb3pZN0h4TlhSMVNRRnY0RU5EM05mZlA1YzVFVEJWTWpNQm9BQUVnd0diSnN3ZGRMQ2NrIiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52f34ff5-4763-4229-9f03-69284d3", "record_id": "flaws_cloudtrail:0000489:52f34ff5-4763-4229-9f03-69284d3", "row_index": 489, "timestamp": "2018-08-06T09:48:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "182.1.251.251", "user_agent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1056, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52f34ff5-4763-4229-9f03-69284d3", "eventTime": "2018-08-06T09:48:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "182.1.251.251", "userAgent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNcUl5RFQyVjNhWm1BQVQvYVFKK2hHMG0zVk5sN1JzSUg0Z01pL0pUNUdkL2NDOGlOQ2pISU5vL2dmVHUweHlOSlRnQ3dOd2liT0ZQN3pTZUxaSmdoZlVlNFlOR3podnRPeGlnVk5BVTBRR2wxRFdCb3htKzZacWNFbzhETHpOQTZoSXFndFZMRk9WOHRaYk96NGhsQ0JTTytPWUZLVXRrNGdFUlRTMU9QYzREb2dYNEJHcmthcVNIeEhCK2pmY1ZKQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "202220b3-3e03-4fb9-ac45-753ef02f049c", "record_id": "flaws_cloudtrail:0000490:202220b3-3e03-4fb9-ac45-753ef02f049c", "row_index": 490, "timestamp": "2018-08-06T09:48:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "182.1.251.251", "user_agent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1061, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "202220b3-3e03-4fb9-ac45-753ef02f049c", "eventTime": "2018-08-06T09:48:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "182.1.251.251", "userAgent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI0OVNDYzJ1VzFBRm1vcTQxVnhCQ2NWYnpFUTFGcmhUT2o1Ukt6M01MMnFHaWxqcVV4WmwrUVdZc1FlN25udlZvRldpdE0zaTR5L2xOSTEyQ1ZHRVJDM0J4cXZ5N1pKUEZSME9vZDUybmxPNklsTnp0UzQ5bXRqendnYjRLNCtFTjQ0SnE0TFMza2dYYnR4dmZtTmVweFkzNXFUak5sY0xIL05lMXFjS0pOeVkrWDloTisraEVISlV6R2hicE01bjRaQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "658f72ff-87a0-4732-a8f1-34fd05b8f8c9", "record_id": "flaws_cloudtrail:0000491:658f72ff-87a0-4732-a8f1-34fd05b8f8c9", "row_index": 491, "timestamp": "2018-08-06T09:48:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "182.1.251.251", "user_agent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1062, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "658f72ff-87a0-4732-a8f1-34fd05b8f8c9", "eventTime": "2018-08-06T09:48:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "182.1.251.251", "userAgent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ3QmJrdFhjMGx2dFNvei80NFU3Tjd3MHU1QzhVbkRBOEROdG1YVWZ1MGwxWlVBK3F3akc4cmJRbk5KZmZ6Vm1mWkJscWpMRFNER1RTQ2U2Q0ppWU5VMFkyN1BYZlhEeXNwZ2tCdjZoWWRoQzFsNUJ5dmduazJzYjJZai9ncTdnS1lwbWtHamJXOVBBNHd2VE5TaDFzaERkRlNNdi9kVVR2ak9ySFpBNytTcUpNTW12dW42TGpEV3hKUHZNQ2QwVk9zdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "742693a-4839-4a4c-9cba-d9e93bbac2e8", "record_id": "flaws_cloudtrail:0000492:742693a-4839-4a4c-9cba-d9e93bbac2e8", "row_index": 492, "timestamp": "2018-08-06T09:48:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "182.1.251.251", "user_agent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1052, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "742693a-4839-4a4c-9cba-d9e93bbac2e8", "eventTime": "2018-08-06T09:48:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "182.1.251.251", "userAgent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZMHIxcFkrUWsvNEVDZXM3T0pnV2h2SHErelh2cHRQK3NTVVhPM2dsRjRaOXlvTS8vbldodm1ocHFNWFFOZjgrRkJKT3pVUTRMUk4vQ3l6LzMvMGVjbTRSb1U5QVgwZHBwaEcvektrK0xRdjA3c3RUdGpBeW5FcE1QWmplZ0d6ZEV2Vlp3S0JEcWg5VSt5V0xjTldWMHVVdWVDZEFoZHJCb1lQMHlvd3ZSZ1dwbXVrMnhsSGgxWmlTRVZvR3RhY2QiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f47917-64fe-4709-91d5-6f6517e26496", "record_id": "flaws_cloudtrail:0000493:2f47917-64fe-4709-91d5-6f6517e26496", "row_index": 493, "timestamp": "2018-08-06T09:48:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "182.1.251.251", "user_agent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1060, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f47917-64fe-4709-91d5-6f6517e26496", "eventTime": "2018-08-06T09:48:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "182.1.251.251", "userAgent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwR1Y5N2ZwdmY3QjUyTHRKL0tLcHlkVjQ2bU4yQlpNaDVlRTEyS2V2WXhaZEtMbXZuQTB6MEhCQWdBMmFsRzk4S0NTZkgxOC9pYk0vV0txS1NoNGNEd1E5TFpUVGs3UmpPNVFQSGR2NnprdnJmZzhSbDFRM3JscmhLeDBESTNFNGdablF3NmdvNGJQdFhIdENRS1pDdnlYNGhYNVM4K1pUTFVtc2dUVUdiYjRjbnd2REZyZmo1NXQvUmZBU3FRU2VyaGtsIiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39a10d75-dcb4-4199-a992-fc11927ea7ff", "record_id": "flaws_cloudtrail:0000494:39a10d75-dcb4-4199-a992-fc11927ea7ff", "row_index": 494, "timestamp": "2018-08-06T09:48:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "182.1.251.251", "user_agent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1061, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39a10d75-dcb4-4199-a992-fc11927ea7ff", "eventTime": "2018-08-06T09:48:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "182.1.251.251", "userAgent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuQTJQZkIrMTFsWEZFMFV2WEdlMy9Gdm1waW1GUUxwa0hiTnlEOFRGY2RqRnVob0ZSMEF5TnAzYmdJT203NFlIVUl3T3g4SFNXZzZob0lLM09hTzdlVWhnQXZsVjNLeUhwWXQwblJ5ZmpPc25aaVB6MndSY1pEYy9nZERwL3Y3L3lxNDZXNStwS2JxcGRlMEUvamJlSThwSEVKSjNlb0RyWjRMcGNiM1JDUWtLdFA3WXJ2bkVoSzNmUmJGQW84OWVOWGpEIiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c4c2da1-c750-4189-90fb-411f326a1cc0", "record_id": "flaws_cloudtrail:0000495:5c4c2da1-c750-4189-90fb-411f326a1cc0", "row_index": 495, "timestamp": "2018-08-06T09:49:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "182.1.251.251", "user_agent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1061, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c4c2da1-c750-4189-90fb-411f326a1cc0", "eventTime": "2018-08-06T09:49:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "182.1.251.251", "userAgent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxRHVBczBNSHlieGwvVWl3d3JoUzZ3L3pmSDFHSFdFUDh5aUN3RGtWY0hzUmRiSHQxc1g0L1RHN0ZWeERqdlhTUE15T0FQMlpHUEdjT3NtSElJYUp6T2RKbjdMUG1lMkZHdkEzK2YxOTgrVDZ0ZkozcHJMMGRpeEhqTUswc1I4dzlsalVWWnp1M0V0ei85Q1hOY3JiMC9OUFJiNUZCZDBOeHNyMnBQZ2ZLYUs4Y3JWNm5QOGF0VVltY0RwKzE1emhVb0pJIiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af2d6009-423c-4b5f-9495-3ce998528febf", "record_id": "flaws_cloudtrail:0000496:af2d6009-423c-4b5f-9495-3ce998528febf", "row_index": 496, "timestamp": "2018-08-06T09:49:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "182.1.251.251", "user_agent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1062, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af2d6009-423c-4b5f-9495-3ce998528febf", "eventTime": "2018-08-06T09:49:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "182.1.251.251", "userAgent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSeHgxalFGN1hJMGY1TXNLbzMzVXFpUSthbHlUYTQwMUV0WTFLTkxVbkxRNStmeHhySzd4bWVHMTZXZ1JYaHJxWm9OcUgyakNaQ0RsSjBrTklWN1ZWUE1pMUpOME1tb0JGTFByY3duSHErSWl3WUM0ZG9wQzl5TkVYRGhBRXYxMXFkT3JhYSsyQk9LSTUwUDBMNE5aR2RxZ3NIZ1dTdHVPeTFIL3kyQnJZbEhEN3hlODY3Ykl1UmVCV2hFajMrTlcxamlxIiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "356fced8-4eac-4c0c-8645-0aae84de7cee", "record_id": "flaws_cloudtrail:0000497:356fced8-4eac-4c0c-8645-0aae84de7cee", "row_index": 497, "timestamp": "2018-08-06T09:49:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "182.1.251.251", "user_agent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1053, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "356fced8-4eac-4c0c-8645-0aae84de7cee", "eventTime": "2018-08-06T09:49:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "182.1.251.251", "userAgent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIWEFUYU15ZzcrdXBqdjd0NVBNOEdlRjZ2U01kN1JVZGt4YWR6RXJDZTNGZmJ3TlYreFd5U3cxb05VampTOUU0OU9oa0lxREVVeGFLYnZKMHVHdmR2cXplL3NMQVZncmRDUmlBeEdzRWloZEk4eEMxV1o0eXJ5aVUxTUJra3k3c1V5dVh3VWthRkVkMUlReHpnYkRObDh3dThLdm1ldWc1N3Q1YStIcGN6K1ErYVNKbW5hbEVVQ1hLZDRTaU1ZOD0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69ad7ad8-c4ca-4f33-a765-05a7ae31970d", "record_id": "flaws_cloudtrail:0000498:69ad7ad8-c4ca-4f33-a765-05a7ae31970d", "row_index": 498, "timestamp": "2018-08-06T09:49:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "182.1.251.251", "user_agent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1058, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69ad7ad8-c4ca-4f33-a765-05a7ae31970d", "eventTime": "2018-08-06T09:49:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "182.1.251.251", "userAgent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIVXdYdXhYdGQ3K2N4a2FHei9VOXAwVXUybmROWmNkZWFtcEY4N2dLS1pUSnRScWZFcTVoUlF4NDNpZk0wbmJpU1dRTENwQU5ydDQwVUZjclA2ZWYvWVpSMzZrZDg0aUs3QXFiTzJLUTNHYmZWYkF5SXZRTW14UncyY01ESjdTUEg4SmJOTC9rV1FvcEtEa0luNGxwdThJRzc2SVJ4ME1KdlF3Z0V1VkZCMmwxRkxVOXN0azJWOWdGUDhseWQxTXpYUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69f12f50-423a-4954-8867-0fe546868fa06", "record_id": "flaws_cloudtrail:0000499:69f12f50-423a-4954-8867-0fe546868fa06", "row_index": 499, "timestamp": "2018-08-06T09:49:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "182.1.251.251", "user_agent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1037, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69f12f50-423a-4954-8867-0fe546868fa06", "eventTime": "2018-08-06T09:49:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "182.1.251.251", "userAgent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3Vk5QMi9rbXdFSFpubFZRWUpvRFRUWi9hQ2pTSVpXMFFxSmRTQ0hsWEQrRHpkbGRwRXJpWWJwTXpEa05wMEczK3ArN2l5WDZSVWMxN1VicFZ3ZWVnTURUOUlhVXU4Ym5xZEI1L29Yait0ejkyYWFKcTZFR1MyMXdZT2dITGM4ekZWeHhUSlQvcFhnT3V0RGFCM0tZdGcwdmdocVRhYXpLa0JkUjZ4WU0wOFVuUGVkQlJ4aFQiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80404d-a7fd-4a94-9f36-60d31e12f5ef", "record_id": "flaws_cloudtrail:0000500:80404d-a7fd-4a94-9f36-60d31e12f5ef", "row_index": 500, "timestamp": "2018-08-06T09:49:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "182.1.251.251", "user_agent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80404d-a7fd-4a94-9f36-60d31e12f5ef", "eventTime": "2018-08-06T09:49:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "182.1.251.251", "userAgent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJybnMwQStHbTBLUVdpQXNWakJjc0cyem13RGk2VHNrdm82bXhyQ2ppclpYOFR3WFU1RzJ1aEJYaU5EdTlvN1Q4cFN5emEySXVWcUNZQktlYmp1Nm04czlybEszaVV1ZXNSZ1FVY0tUZlA3RUpnc205LzFXWEhubmgwR1ExVjZaOFh6T1JzRlR4MlRlaHd0d2E0cnV6bHBDUFFYNUlHcXFpNlkwZHhSa1FQNmx3UXhtQ0VjYXFsQ0ZSenIwTHRoajhIR0xIZXdCVWp2K0hPVFRGTEt6bTVBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9de047823-3630-48bb-b0c1-5e7aa99e990a", "record_id": "flaws_cloudtrail:0000501:9de047823-3630-48bb-b0c1-5e7aa99e990a", "row_index": 501, "timestamp": "2018-08-06T09:49:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "182.1.251.251", "user_agent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9de047823-3630-48bb-b0c1-5e7aa99e990a", "eventTime": "2018-08-06T09:49:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "182.1.251.251", "userAgent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMMFNMbVJCSEJCNUlLVWhuVk03WVlzbEl0L0ZEd2Z0RXVYWUN6MTNiVUM5UE9jTElXWU9EcHJrK250UFlibm5DellaM1ZSNHg1RGcrd3BJL3diUTh5YnNaNkgydkVsK0dSS3hac3BXY0ZodklXV2NBZVEwMitZU1ZUMWhtM2FaVmRmelVHa1RWVlpQNUlwRVpYNDRCVXhXME44WElLZGR3aTVBeko2anpESlRGMjM0Vml0cytRUHkxb1lrUnJVT1g5bHJlQVBleFdCenk0ZWtzVHhmcFhBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77b0c21c-155e-44ef-9c01-905d6e4818eb", "record_id": "flaws_cloudtrail:0000502:77b0c21c-155e-44ef-9c01-905d6e4818eb", "row_index": 502, "timestamp": "2018-08-06T09:49:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "182.1.251.251", "user_agent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77b0c21c-155e-44ef-9c01-905d6e4818eb", "eventTime": "2018-08-06T09:49:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "182.1.251.251", "userAgent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJXbENaenV5ZHVUc0p3T08wREc0YzFkdTJVVzlCMVJFQ1Fsd1RXYmd4Y01JbWxwRlNmQ3g5a0FKNkVNV1VOaGkyV3h6cmRQaG9TQVBlKzRFNGl0elZnelZTdk52YTVaYTJrWFVHZ0kzZjVYZjJHRlJkUno3alVJYXI5YTA3bzBOd29MZ3RJN1RwS2NMQjViUGFXVkRxSVVDb28ybzYvdDRCeXIrQnpoMXBFakFJQTVDYUdwSlhqdXVPMFovdzJMRUhoZG9ybXZITFl2bUFUTmVYWGNjR3FRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d895a7a-6c18-400b-b37a-0c05126f8a5b", "record_id": "flaws_cloudtrail:0000503:4d895a7a-6c18-400b-b37a-0c05126f8a5b", "row_index": 503, "timestamp": "2018-08-06T09:49:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "182.1.251.251", "user_agent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d895a7a-6c18-400b-b37a-0c05126f8a5b", "eventTime": "2018-08-06T09:49:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "182.1.251.251", "userAgent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0NkJNZG16NlFOUHRrVmo1cjRpd2V2VTJUOFU2TUJWMDI0UmNkVWt2MTFPK01qR21idUhabThIMzYxNndUVnBXYU9sQmYrRHhabHBOK2Iwb1VDQ2NoUjMwdmROMkNRRExGc1FyZDNMcXdEcldoZFdzeW9YemFBdTB1bjRtRG9KNjc0S3g0UmVIMEx1UUcrWDlzUW1XdVZwVjF5a2k3UHhRMVhTdEd3TTRZVHJrT3FKelJaS05UNGsxU21KNmkzbmplMGRXOUFXN3h4dVJ1Q1Fpa1BJVjVRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f8c8913-4406-49ae-8c49-166145bc261fb", "record_id": "flaws_cloudtrail:0000504:8f8c8913-4406-49ae-8c49-166145bc261fb", "row_index": 504, "timestamp": "2018-08-06T09:49:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "182.1.251.251", "user_agent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f8c8913-4406-49ae-8c49-166145bc261fb", "eventTime": "2018-08-06T09:49:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "182.1.251.251", "userAgent": "aws-cli/1.15.50 Python/3.7.0 Darwin/16.7.0 botocore/1.10.49", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwRDNHb0Q0MnA4azdCOXZuWlNXZ2VhZEdPTXBMNkFvTGRnOEVveTFHVzh6bkwrRW5obkpRZmcyY0k1ejROd0hPMDJVb2UzWW1DTjVVRjhtVlZ6M0FiQk0wWVVEdDFMVjdJQTl0bmFBU2Y1MDJseTVsRDVBMTgxYzNHUitCZUM1bDlWTjhsdGVEU1BickVWNzgrNi9CWTR4ZHkrSlhnaU5GWHN1eC9jVVVyNW0xR3JkNzV2bWQxVGg5NTBTam9GanFla1o3R3dDWlhSY3J4ek9HMTd1b1JRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9aa8d7b6-7c72-4fc3-994b-085c2d67253c", "record_id": "flaws_cloudtrail:0000505:9aa8d7b6-7c72-4fc3-994b-085c2d67253c", "row_index": 505, "timestamp": "2018-08-06T10:11:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1493, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9aa8d7b6-7c72-4fc3-994b-085c2d67253c", "eventTime": "2018-08-06T10:11:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAPPX506BZTHF2C4W2", "expiration": "Aug 6, 2018 4:19:36 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be079cfa-a225-4df0-a710-bf5f71a023a2", "record_id": "flaws_cloudtrail:0000506:be079cfa-a225-4df0-a710-bf5f71a023a2", "row_index": 506, "timestamp": "2018-08-06T11:11:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1494, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be079cfa-a225-4df0-a710-bf5f71a023a2", "eventTime": "2018-08-06T11:11:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA109HI95HZ0M56MO9", "expiration": "Aug 6, 2018 5:20:05 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7443b443-9e72-4927-9018-4034f5fe3518", "record_id": "flaws_cloudtrail:0000507:7443b443-9e72-4927-9018-4034f5fe3518", "row_index": 507, "timestamp": "2018-08-06T11:43:58Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1946, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7443b443-9e72-4927-9018-4034f5fe3518", "eventTime": "2018-08-06T11:43:58Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIANWG3O2PT8QT1MRBW", "expiration": "Aug 6, 2018 12:43:58 PM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aeaeeb34-a0c4-4516-abd7-e67ecdd6f345", "record_id": "flaws_cloudtrail:0000508:aeaeeb34-a0c4-4516-abd7-e67ecdd6f345", "row_index": 508, "timestamp": "2018-08-06T12:11:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1493, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aeaeeb34-a0c4-4516-abd7-e67ecdd6f345", "eventTime": "2018-08-06T12:11:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA4XYQ4GGJWSSO84J8", "expiration": "Aug 6, 2018 6:11:58 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62fe92e9-a9f5-47cd-8e99-e3b85aef6c5c", "record_id": "flaws_cloudtrail:0000509:62fe92e9-a9f5-47cd-8e99-e3b85aef6c5c", "row_index": 509, "timestamp": "2018-08-06T13:11:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1493, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62fe92e9-a9f5-47cd-8e99-e3b85aef6c5c", "eventTime": "2018-08-06T13:11:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA1WSF28XRVZAJV35G", "expiration": "Aug 6, 2018 7:33:49 PM", "sessionToken": "FQoGZXIvYXdzEJf//////////wEaDOzznwYOJYAgtulqsiK3A/GLOW+M40orsMa0pBWZvH8wO8q61Vi0kteX7zMM2aMfiEbtDFV4Nt8JnnqaNKUlwmoT2IcKFsh/zxvC0JDWPYxyqaAPHkBoNoSOYhV9BTMgXwLlUUrZY+0NC3SqSFvSr1M9M+XdTkgilPqIhpAxDUnSkm6D8wH3rjUARCeeWuDfgCfl3dDLAUrArPkxpaDU+UssZyPv1rP+hx17JbZyJsh73sXvNxDeUQuKG29hzXowjkMaaySuJ2i5QOei7C3AEHv1mDO7U3rTrg6FlJemTwjw3l/7FHRVgo46ZcXo9I1KBaBr6OPZGN4LLFfP90oj6SeKLOocJsJj1L7+Zjs9BMTG0/xTSLV5wPTYdCiCqxtIBx2MH4/6k4ibT8xkCcQ4HlNApswQlWRrgbdB5S4leWwX5E/6kHqnzDnQ2aPn9s1gDgjVLvFeuU4LKMgJ9Ovk3gE42k2h4GemMrYhUxwSlSBjGOvVPlrBIMuXLEFcI5LGEFafBFsELWsATJrfyE667m3r/scQHdfpd7ZKGIe5t99ul0Z3loVvy5BRDteFriziKmRXUAyMOhm3EN6+Rz6bRrB3lzbGFVoompKh2wU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "224fcb8b-6a97-4b1a-85f7-756a6800b8f7", "record_id": "flaws_cloudtrail:0000510:224fcb8b-6a97-4b1a-85f7-756a6800b8f7", "row_index": 510, "timestamp": "2018-08-06T13:18:46Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.140.1.34", "user_agent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "224fcb8b-6a97-4b1a-85f7-756a6800b8f7", "eventTime": "2018-08-06T13:18:46Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.140.1.34", "userAgent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2be6e4d-f520-42c7-b8ec-d3b752cb48e0", "record_id": "flaws_cloudtrail:0000511:e2be6e4d-f520-42c7-b8ec-d3b752cb48e0", "row_index": 511, "timestamp": "2018-08-06T13:47:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.140.1.34", "user_agent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2be6e4d-f520-42c7-b8ec-d3b752cb48e0", "eventTime": "2018-08-06T13:47:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.140.1.34", "userAgent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "884207bd7-7783-4680-9c2f-d39c3d730e64", "record_id": "flaws_cloudtrail:0000512:884207bd7-7783-4680-9c2f-d39c3d730e64", "row_index": 512, "timestamp": "2018-08-06T13:48:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.140.1.34", "user_agent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "884207bd7-7783-4680-9c2f-d39c3d730e64", "eventTime": "2018-08-06T13:48:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.140.1.34", "userAgent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1016a358-5012-4d29-9586-b65bcbca9df6", "record_id": "flaws_cloudtrail:0000513:1016a358-5012-4d29-9586-b65bcbca9df6", "row_index": 513, "timestamp": "2018-08-06T13:48:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.140.1.34", "user_agent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1056, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1016a358-5012-4d29-9586-b65bcbca9df6", "eventTime": "2018-08-06T13:48:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.140.1.34", "userAgent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYbWlsRHd5aE4weVA2Rm0zRWFKdEswVkJRaFRkTWFsa0FRUkMzeFlwQkJFQlZMV0lJVitsVVJNWGk1Zmk1RGxEbDgwVFdmTWJmL3QrWk8za3ptQS9TQzVHNmk2a3pnMERydjdpUEdENm5QK2dIdmhUVWEzcDVUVWdyQmE2VmN0ZExMNWtjVHZWc1NvRSt6MWp0VHY0TFRESDFvZDFRRzBLcWhSREFaaXdMaHB0TjM2UndIem1WQlNCUWVUclZwWHVjMlVOIiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9927f6c-900d-42df-b34b-6aa13380f0aa", "record_id": "flaws_cloudtrail:0000514:f9927f6c-900d-42df-b34b-6aa13380f0aa", "row_index": 514, "timestamp": "2018-08-06T13:48:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.140.1.34", "user_agent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1056, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9927f6c-900d-42df-b34b-6aa13380f0aa", "eventTime": "2018-08-06T13:48:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.140.1.34", "userAgent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNdWwyeldvYXBCbmxsVGY4bWJGYkJ5VFY4VVBlRm5xWUk0MzQ4KzYyR3NzRVBvSW5LTVdNR1UrdnJGaWI4U3gvYk9tdGtGZGx5SXRqdStEQUJWSGpjKy9nblR2NFB5WDVURDlUbFprcDY0UVBsZldmWlVBUCsva3ljamtmK0VEMEJsRE4zT2xIL21CckJWYmlHYmNkODZNNGVjaE5sQ2czVFVUUkE5ZXB4NmtySWpFUWpLdjA4WHYxUHhrNXlLMlNhai9KIiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd37f57d-b597-4825-ae01-4995c9e2daab", "record_id": "flaws_cloudtrail:0000515:cd37f57d-b597-4825-ae01-4995c9e2daab", "row_index": 515, "timestamp": "2018-08-06T13:48:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.140.1.34", "user_agent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd37f57d-b597-4825-ae01-4995c9e2daab", "eventTime": "2018-08-06T13:48:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.140.1.34", "userAgent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxS3U2TGpaZDd4bTlETyt3S2VRVzZiQ0NQQUZuOWVMR0JIY1RqTWlQYmNOMDB1SmFCN3BydEJzbXcrTkxXVndRTzNFZnZxYi9SSkppM2kyVERDY1djWlhlb2w3S1ExWEJvNi9vOHMrSWJKZ3dSR3UwQTl5Yks0SFl1czR2NHpLWS82bktrR0RodWFmOHM0a3A4RGw3b25jMlVHdTlvazdTQ2tZMUEwa3phVG9IM0JYb1huc0NnU3c2REpTTEJGc1ZsQmRoIiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00479cff-d33d-4e40-81cd-29e21f70e790", "record_id": "flaws_cloudtrail:0000516:00479cff-d33d-4e40-81cd-29e21f70e790", "row_index": 516, "timestamp": "2018-08-06T13:48:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.140.1.34", "user_agent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1056, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00479cff-d33d-4e40-81cd-29e21f70e790", "eventTime": "2018-08-06T13:48:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.140.1.34", "userAgent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxMGlsWG9OZWhrWTVnZUp6NUxtNllRdUJJTFdXbUxaYXVUaEFGQUhJUWVpY25MOE9tcG5wQkUrVlNPUEtnWjF6Q1JxTDk5NmttZFd3TzFlSWVyVFc2MFh0ZFh5bHlhaDQ0YTE5UGVhaGZIeHhobUx0Q0ptRHJrcUFJMjZoQ3NudUVVQ2psbFA0MCswMnVtNWV4bm1lYjd3Y0lRZ0NONlE5QUpXWmQxZmh5Tzk1bmZIVGk5eTY1SE05a1pVWVhiTTRpYyt1IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d9921ba-cca9-408c-962f-f21b56cc674d", "record_id": "flaws_cloudtrail:0000517:2d9921ba-cca9-408c-962f-f21b56cc674d", "row_index": 517, "timestamp": "2018-08-06T13:48:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.140.1.34", "user_agent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1056, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d9921ba-cca9-408c-962f-f21b56cc674d", "eventTime": "2018-08-06T13:48:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.140.1.34", "userAgent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJwRTRENU43YnczTUE2OUl5elptWUMxcHQrTUM4c3BCUkhoZzlEb0poaEx0ZUtiUlZsY3dtcS9FVTlleC9zdEc4Z3BJRFd2N3ZOL202NVdKbjkwckJiQkhuWXZWN2hOZWhGNmpKZTVxQVVOZS8xaVNNb0U2RUxyeDRmNHhrTmZpNHVLZ0RRK1MyQXczbXFmSlYxL2UydDJselo0ME5vcmlraVoyRE1QVmMyMTd4TnorY3hiNmxEWmFoYUFaZ3dqM1daUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66366e9-179e-47df-b262-23d5b23e50ec", "record_id": "flaws_cloudtrail:0000518:66366e9-179e-47df-b262-23d5b23e50ec", "row_index": 518, "timestamp": "2018-08-06T13:48:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.140.1.34", "user_agent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66366e9-179e-47df-b262-23d5b23e50ec", "eventTime": "2018-08-06T13:48:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.140.1.34", "userAgent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1TWpZb3BwRTVIb2pnL282R2NoZitGZUVnN0xZOFZTc1V4Unl6cjZ0QVFvOTJDbGpzWVdwZkY0QTNaU0NCUTRqRVNLb1kxcTJOaWVpblM2WGxWcFpCRldIeExob0hhQTJhTk4zY3REWmRHQ2o3S3I5RFpkeGVkU0VDbThYSitNcHdxNDNvS1ExUk80dCtwV0owV1plTTdzZnlTaUNBWXZCMEVmM2k1ZkhUeTdZQSttOHBMMzFmVlA4QVpabG9HZ0cxUk5iIiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b5d9558-2d74-414b-8374-50cda2b654fd", "record_id": "flaws_cloudtrail:0000519:3b5d9558-2d74-414b-8374-50cda2b654fd", "row_index": 519, "timestamp": "2018-08-06T13:48:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.140.1.34", "user_agent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1049, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b5d9558-2d74-414b-8374-50cda2b654fd", "eventTime": "2018-08-06T13:48:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.140.1.34", "userAgent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJxeHFOdmlwYkhiMGhKb25pakRGQVhFVlpmTCsrak9YVmJQeGhrSXRlUjAySUdTbUFHSU1qVUdrVjVHVEdmdGpXZmxtdE1zbUd3L1dqUXZVVk1hRE1UQVdyalA3VVhOMXU1ZVRGK1g2Qk1jaG1UQlJ0YTY3MTliNG1xUjA1RVNOZElsRFZkem9MSGFBREdreEEyTmVjMlQ5UDNqdUhHaDNmNU9NeGIyNDdrRktINTVQRjR6ZFhmT24yek9sTzBtcEQiLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a2013c2-fa25-4dc2-9362-117d969b2436", "record_id": "flaws_cloudtrail:0000520:1a2013c2-fa25-4dc2-9362-117d969b2436", "row_index": 520, "timestamp": "2018-08-06T13:48:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.140.1.34", "user_agent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1056, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a2013c2-fa25-4dc2-9362-117d969b2436", "eventTime": "2018-08-06T13:48:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.140.1.34", "userAgent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6UWdySmdwWkVCQVVrQXdMWkhUUkhnN3RYUzFIdnF0SDQ0aXBnd0puRGVlSEZycmtwY0N3aUVwNzQ1UnhBdnBncWQzUGZXYUNpTGYwazArenBHTG1zR3U4eUFJVmNJVjA1allRSHFQWTQ0dTRpb2MrejVMemIrOSthNHExdUwray9qQUdwQklFUndnOGpIWXBZRGJmOEEvTHlVenpqU01PdzM5T1FkS1NzR1dmZFJsWE9qTWp0ZTdSYXpGMzFpaDgxT1EvIiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "936916e7-5207-4872-baf2-78551d97ccb9", "record_id": "flaws_cloudtrail:0000521:936916e7-5207-4872-baf2-78551d97ccb9", "row_index": 521, "timestamp": "2018-08-06T13:48:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.140.1.34", "user_agent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1052, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "936916e7-5207-4872-baf2-78551d97ccb9", "eventTime": "2018-08-06T13:48:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.140.1.34", "userAgent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJBa1J4eVZ1UEVCNGdhMCtnckdmTE95eEE5blVFcEZ1SGJ6azJxUWpjOUdPcnh6RDZiaGZqNllpVHhOK2htd0NYOVE2TUJpVnBFYk5PZUFLQWt1azNWYUFGZk44a1Iwbk5EYytiV3RnSmhvN3dqZk96UThEbVN5Q3ZnczYyRG41aVhCeDkvR08rT3cyUElHUGlIbDlOc1kwK2hGQkFuQThkaWxXUGFteG4wMThkeEp0eDhJYnR1UWpzTXFwZHl5WGtIK296IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1e3ac8e-228b-49d9-874c-3236abf0a97c", "record_id": "flaws_cloudtrail:0000522:a1e3ac8e-228b-49d9-874c-3236abf0a97c", "row_index": 522, "timestamp": "2018-08-06T13:48:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.140.1.34", "user_agent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1e3ac8e-228b-49d9-874c-3236abf0a97c", "eventTime": "2018-08-06T13:48:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.140.1.34", "userAgent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJlUEtKYUtDMmdQTkdUQ0dMZU9jem5Yb09XQUtRNFRrejh4cjhTN2owSS93VmtSWXdrejN2UFBtdlZnVTNKQ0VvdXRKVDFvMTlIWk9NeEhyR2FVUUo0aTM5VlJVMndGdkRvT1gxakEwc0E1eGZiTkZoZHRydlM4SDFVOTNHeHFMRThJSWpnMUxhNnA5SW1IMFQrNzl4eVFQMW9na1VGM2U3WHFscUN2L0tiZDlBNmkrTEZ5Zk5aUWJvc0FNOHVYSElTWm5yIiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88c259a2-5e3a-4d37-8106-80e6bde165ca", "record_id": "flaws_cloudtrail:0000523:88c259a2-5e3a-4d37-8106-80e6bde165ca", "row_index": 523, "timestamp": "2018-08-06T13:48:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.140.1.34", "user_agent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1056, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88c259a2-5e3a-4d37-8106-80e6bde165ca", "eventTime": "2018-08-06T13:48:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.140.1.34", "userAgent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJKVlo5QkJxLzVNeFNnMFJrYU1vcVQ1NGFPODZaQnFTc2YvZTZlalRyRG5vTHJ2eExod0U3MkJPRm5mVXRPNjhWZzQ2UGdTNE1QK0NnQTFTakREWUVDWnpER2kvU1U3NDJ3V09aWHNxMEh2T0R3WXhOUTVETzZNOGViR2xGcVFBc0dmVjQxOHpLNVQzM1d1Y3ZKU1lEdzFHOUlqWTd5djI5b0gxSnVMelQ5WnhMbSs5c1FoQnhYbkhMT3JlU1c3Ukxvb3ZHIiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7cda7dc7-12f2-410e-8a3c-ff94f35684d6", "record_id": "flaws_cloudtrail:0000524:7cda7dc7-12f2-410e-8a3c-ff94f35684d6", "row_index": 524, "timestamp": "2018-08-06T13:48:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.140.1.34", "user_agent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1056, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7cda7dc7-12f2-410e-8a3c-ff94f35684d6", "eventTime": "2018-08-06T13:48:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.140.1.34", "userAgent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNdFpERXRrQTUwKzNXeGEvK1grNk5yaGlhaVJDMWpDUUU2UEN5Rnp4dmdFemtVQ3BOOUZXbHZkSGhGUmpKZTNMV2toYWdBdHRoZ01Qc3p4VXhndExQbnlnRnExMWdxQlVwcCtNVklKTlJZMldPUy95anNIdFVmUjN3emNwTUNXYzUrY3EzeFArOU4wUWlwK3F1UStVczVpOUZnbVU0WlVGUE9aU25udXgzdWNldjdsc2ROeTFGVFNyeFRqcFNDeU93cUw3IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62ad0b4b-fae8-4982-8366-40c91d6590bf", "record_id": "flaws_cloudtrail:0000525:62ad0b4b-fae8-4982-8366-40c91d6590bf", "row_index": 525, "timestamp": "2018-08-06T13:48:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.140.1.34", "user_agent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1048, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62ad0b4b-fae8-4982-8366-40c91d6590bf", "eventTime": "2018-08-06T13:48:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.140.1.34", "userAgent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5VW10NlJTVjlJMm94NExwbnZOdm5nSTA2QUtNQUF1SHpOaG9QOW9UcDVkZ1BwRzRyZFMyQnJ4aExBVlNhczQzN29sL1dqSFVwNWxZdkRZeHlBMWtEQXdLdlNZWTZzSU04NWNrSEJxbjFpZ016TnZzcEZWdTZvaUNvemxlZmJmdW9aNVl1UXNRSTl3V1Zuclh3dXhmVnNHa0NiUnhzL1BJTnhJRGVMajlJTUh6K01lcjVscFdKMmFmOGg1QVR5dz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ca2fd2f-5e1a-4bf4-bc30-f14c56af66cb", "record_id": "flaws_cloudtrail:0000526:6ca2fd2f-5e1a-4bf4-bc30-f14c56af66cb", "row_index": 526, "timestamp": "2018-08-06T13:48:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.140.1.34", "user_agent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ca2fd2f-5e1a-4bf4-bc30-f14c56af66cb", "eventTime": "2018-08-06T13:48:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.140.1.34", "userAgent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkRGV3V0l5VDNzWUFaNXBkblRYOU1tQjJqWVhveng2OGFxbFBaclcrOWJXVEFFN1lPZm9ZRUwxalBwTUw4SzhIZGRhSnF6NHl1Y0ZVNXpqQytsVWpCTE9pU0pIWVRVeldQK0FTTFlIMzF4MHo4c0xMaGRnK3FDUERWb3hlN1VQc0NqeWlBWmkwcWYvZWdXK1lSRUt4Q3dOTDRPaUlqakR5OE9RbFV5UWxPajBXN2d6QjJnMllYZ0hGaERJU0RTckJhYXExIiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81e047026-61df-4b56-9761-cb56370b04b1", "record_id": "flaws_cloudtrail:0000527:81e047026-61df-4b56-9761-cb56370b04b1", "row_index": 527, "timestamp": "2018-08-06T13:48:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.140.1.34", "user_agent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1056, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81e047026-61df-4b56-9761-cb56370b04b1", "eventTime": "2018-08-06T13:48:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.140.1.34", "userAgent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJTYnJXbVFuVUhvRVRsTU1Qd0tWS0l1cWRHdEZnaHZ1MGxvR0NwVldINUxVU0hwNnFLR2M4OUN2dk8renVMU3ZPUnRVL0trNjVOSEd3eTF5cXVSWEErV0UwekJqQ25UTUxUWEM5dndUU294WDl2VHdXSTVvZzB3UGZkejdLL2ZOZUU2UGg4SGRiQm4yY3ZXK21XbmJXclBDSVgwNWsrcklFcHpCVGp1dENDdmxKTzFscVVqLzZMTGdrSmVGQWZleExyRG1ZIiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "274d00bb-64fa-44e3-a035-7cd6c574f31f", "record_id": "flaws_cloudtrail:0000528:274d00bb-64fa-44e3-a035-7cd6c574f31f", "row_index": 528, "timestamp": "2018-08-06T13:48:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.140.1.34", "user_agent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "274d00bb-64fa-44e3-a035-7cd6c574f31f", "eventTime": "2018-08-06T13:48:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.140.1.34", "userAgent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI1alJUenZ2dHJ1SnFkK01iY1RxQk52NWUxNE96R2k5K2ZuTmhWeE1GcjcrUVFEOElCNFdzL0h6MU1lTzFVZjRzb2FodGdLTmZwSEszVnNBUDF0Q2tsTXRUYmJUM2FTb1dBeU9YYkdveUtqakN5SExuV3lLS1dzVDVyUGVURUF5Zm13dExNa1Y2aHdud1NzMWJpNkdyMEE0ZEJHYjU3Q3YxMGFYSG9nOEZRZGZQR2Q4Tys4N1hTSmtWeE1LQ1c4MUdzYXVQQk4rdTJVNW1ZbjJXU0p1QnlnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08ba31fd-caed-45e6-afd5-a7b619a721f9", "record_id": "flaws_cloudtrail:0000529:08ba31fd-caed-45e6-afd5-a7b619a721f9", "row_index": 529, "timestamp": "2018-08-06T13:48:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.140.1.34", "user_agent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08ba31fd-caed-45e6-afd5-a7b619a721f9", "eventTime": "2018-08-06T13:48:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.140.1.34", "userAgent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJSVXJtWG44OTlwYVQ1dVE5clZEdS9tNURMTldMZWJDMFFHaTYxYU9GeDNzaXRVQmhFdlZoN3NYdzlRdmtveHErUS9UcVBPVzE4V0VCZ3ZvbC9QeWFVRGM4L3RDMjd3aVNHYzZiSXZFaGhzeEJaT2VxMlpabklFdDBxN0NvcXNuOVJGblVoaUw5T1BjZDU0QStoNm85Q3pNcFpXdkE0bkFPdEV5UGw3QkxBZmsxVm9IRW85WldlWDY3S1VzaS9Tb2pEWjE4cm5iY1RFSHhoZFB3SWZ3WHVnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b748baf-c45b-4311-bcae-25a125d52c47", "record_id": "flaws_cloudtrail:0000530:5b748baf-c45b-4311-bcae-25a125d52c47", "row_index": 530, "timestamp": "2018-08-06T13:48:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.140.1.34", "user_agent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1032, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b748baf-c45b-4311-bcae-25a125d52c47", "eventTime": "2018-08-06T13:48:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.140.1.34", "userAgent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIZmRubkFUWWp0ai9jODBqZmlXSFlxK1FHRTFERytkc2I1OVI1dnF3UWZQQ3R6bzBBd0M5YnhRMmtPMFl1OUcvcEZQZGpnWnpaK3M1MlRwZWp1N1kvV3RxdTZvZCtKeG1vSk91NVRWWE1yRkdLZGdmQUpxRzJpcXJza3M4eFRoVmVkaFBsa1lUZGVBNm83NUgzS2k4OVp1TXVDRTlBYVEwRi9DMTdrNm14RTZWVEJ2U1J5Y1ciLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ee0626f-9923-4155-a1b0-475929be4467a", "record_id": "flaws_cloudtrail:0000531:8ee0626f-9923-4155-a1b0-475929be4467a", "row_index": 531, "timestamp": "2018-08-06T13:48:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.140.1.34", "user_agent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1081, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ee0626f-9923-4155-a1b0-475929be4467a", "eventTime": "2018-08-06T13:48:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.140.1.34", "userAgent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJMMzRlajlGK3JVRy91NmFnS3F3QW9aS0JpVGxQSHAzZERPMEZ6aUJOWnZPSEpCcmwzdFU5L3NpZUxyOGFueVdzN1pQZjdqQmpkK3ViV0pFekZYcnZtV0pYVnZSTmVZQk9ETm1XVVM5VVZBTjkzaThuM2ZDeUFhV2Q2ZWV0RGg4RVhqVW5Va3BkcnNjN2VkblgzbDdOeEN6WWNNWFRwNnE5N0pSSU4xeG1lMTM5eXpLSkdlUkgva1BxQ3ZIZTdFcW5GOUdNemxCUEFVVlRnK05YM0NJZEtBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55f1bfcf-6d09-4830-aae6-fec1ae1ddc85", "record_id": "flaws_cloudtrail:0000532:55f1bfcf-6d09-4830-aae6-fec1ae1ddc85", "row_index": 532, "timestamp": "2018-08-06T13:48:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.140.1.34", "user_agent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55f1bfcf-6d09-4830-aae6-fec1ae1ddc85", "eventTime": "2018-08-06T13:48:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.140.1.34", "userAgent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJIVXB0UFp1SXNzUGRtY3kzajJpczZUSUtmb3hhZlhxbTdLbklMS2x3K0s2VEVRZlFmaEFhUTA5aGk2ZzYvcG0rekVxWDB0Ulh6azZ1eVgvUzUvRTQvYTJid3dQSFVvS3FpVGZlOEdSNzdzeThuMzNnQU44WmhGaXp3YUhBdnA0eWoxanpOVkJMQWxybmVSZ1hhSCtyUEVPSGhsS0xFcEJpOWNsaTFIakl6bnMzYUlRcjVSTFNhSjZFWEY3MmtBWlB3d3FxVXFXcW83Qyt5NjlMS3pFaE9nPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3263aaec-6b8a-4aa1-9e5b-e4ab030adb7f", "record_id": "flaws_cloudtrail:0000533:3263aaec-6b8a-4aa1-9e5b-e4ab030adb7f", "row_index": 533, "timestamp": "2018-08-06T13:48:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.140.1.34", "user_agent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1080, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3263aaec-6b8a-4aa1-9e5b-e4ab030adb7f", "eventTime": "2018-08-06T13:48:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.140.1.34", "userAgent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVdTR6emdQZEkxSzJrY2xWRUtUdGZyNlJ0K3J6alNoTlRJVmVjKy9wTE5BTXkza2oxMytzVmQvU0dySTE1WnorVlg4MlVUUkgxMkhlOE84dW9ncldReWI1OTZjc1ZWdzBjMS96YkRhczJBN1B6WDVJTmVLMXNSWjdQRURITE9nTjlxY1JYZGlWTVN6ZVMraExnaklUWmR1SHJqellrdUdKR2gvSFdPdy9ITE5DK1hIS3hxWlFENFBZRTE0K2xwQS9uekNCTXNZUmxWMEM1YjNpT25TYlJBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89729-d33f-4b9b-9045-d05a4639fd29", "record_id": "flaws_cloudtrail:0000534:89729-d33f-4b9b-9045-d05a4639fd29", "row_index": 534, "timestamp": "2018-08-06T14:10:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.140.1.34", "user_agent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89729-d33f-4b9b-9045-d05a4639fd29", "eventTime": "2018-08-06T14:10:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.140.1.34", "userAgent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cef74c7e-6dcd-4010-a2a4-93b299df10a2", "record_id": "flaws_cloudtrail:0000535:cef74c7e-6dcd-4010-a2a4-93b299df10a2", "row_index": 535, "timestamp": "2018-08-06T14:11:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1493, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cef74c7e-6dcd-4010-a2a4-93b299df10a2", "eventTime": "2018-08-06T14:11:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA5WXHEBBL2K8BMNOK", "expiration": "Aug 6, 2018 8:25:23 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab5b1584-0b6c-4bb8-ba64-d90061fb5461", "record_id": "flaws_cloudtrail:0000536:ab5b1584-0b6c-4bb8-ba64-d90061fb5461", "row_index": 536, "timestamp": "2018-08-06T15:11:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1494, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab5b1584-0b6c-4bb8-ba64-d90061fb5461", "eventTime": "2018-08-06T15:11:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAK6PLGG34TSRM5ZVK", "expiration": "Aug 6, 2018 9:27:52 PM", "sessionToken": "FQoGZXIvYXdzEJn//////////wEaDEurJEPd753gzScTMyK3AyWEm7v4zywdljHDPx/syOQrw2XSLHcCqSbHUodh0PoWRumFuZFhrcUw4DEBaZHorajNf9oNbTaQ9/PhIcIXtOWOFzgVgnoOZlDcsIBfgIclPq8CdtkEslyhA+b+7oAxrR/NDloV6Xpj6g5JauDknkDl4RL4S64o6cEIhuP02EAlsp8Ips/RIrPQSbaJXElBBVJ3+iyE2IpLbwkLvqXGuCOJbmbRWeiE6tmdc+ir3wIdyR9Wq908Ytdslvgvb8LnlvOXxKiUvdFAa4uMTai0xMW61Hq7FGZzxOSrkULq4wRw78iB7NdOy2AE+GzxZZOQm1VXPj6cca9Qw+xtKEGzgQuixNk12s9lroMeYJjURi0jgzd/tED/FnNPlESmCFgpkVm8kufN+KdMEhi2ELNCF64T4cTR1vmXyiyfcuJLIRG3Mr/n5/vKhrQIj164Rv1MliopP0nmRaHGC6SYR993Q9hE2Oh2oALfjN/0+Cq9YjzElTxSaooYuzPo4H91NUNqHheG4YVBWDnO+E3CphHVWm0fLn39aBUR2UaDBeyLwMJSo43SiWFhTV9uXhEudVqYf9NGpqHTMQMousqh2wU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bbeb7b16-bb09-4f7d-b919-8f058f54bcda", "record_id": "flaws_cloudtrail:0000537:bbeb7b16-bb09-4f7d-b919-8f058f54bcda", "row_index": 537, "timestamp": "2018-08-06T16:06:03Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAK6PLGG34TSRM5ZVK", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "39.206.87.24", "user_agent": "aws-cli/1.15.51 Python/2.7.15 Linux/4.16.0-kali2-amd64 botocore/1.10.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1118, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bbeb7b16-bb09-4f7d-b919-8f058f54bcda", "eventTime": "2018-08-06T16:06:03Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.206.87.24", "userAgent": "aws-cli/1.15.51 Python/2.7.15 Linux/4.16.0-kali2-amd64 botocore/1.10.50", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAK6PLGG34TSRM5ZVK", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-08-06T15:11:54Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b1bf2a4-d47d-497d-a15c-202788b10efa", "record_id": "flaws_cloudtrail:0000538:8b1bf2a4-d47d-497d-a15c-202788b10efa", "row_index": 538, "timestamp": "2018-08-06T16:06:06Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSAccount", "arn": null, "account_id": "369072737419", "principal_id": "AIDASO0WDNC3GCQUJIYAZ", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "aws-sdk-go/1.4.14 (go1.9.2; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SummitRouteAudit"], "raw_record_size_bytes": 1501, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b1bf2a4-d47d-497d-a15c-202788b10efa", "eventTime": "2018-08-06T16:06:06Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "aws-sdk-go/1.4.14 (go1.9.2; darwin; amd64)", "awsRegion": "us-east-1", "userIdentity": {"type": "AWSAccount", "principalId": "AIDASO0WDNC3GCQUJIYAZ", "accountId": "369072737419"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "roleSessionName": "2132267588865880227", "durationSeconds": 900}, "responseElements": {"credentials": {"accessKeyId": "ASIA3MHXD7M07G2HQDDQ", "expiration": "Aug 6, 2018 4:21:06 PM", "sessionToken": "FQoGZXIvYXdzEJr//////////wEaDKEiQ+Ab658GKqwh+CL7AR6VJGneIvs23vyJ8h/7xpzRxP0tpptnzwv7wtI8A/8BfHjcyXE6KqjwgbzXb+VLdtWJkn0Z8XkHRYEKZNaqXdk7FjpdTTD1aV2WzBI2KHCwzqWVs1aTxec8MhfpX6D0cISeINOVwWY6ZldgjxYUSV4PPTAiLm68PlqNT1QwEgm85V/7vg9jcMXTDssNeR5yXf0io5Y3bGaC0c2UeLPdu9orPAepUZAQPyhLddFKreVfKkzly+zP76F9UI1Cv7z3QaekNUrHH4GDYaPnPkP0z/9cKRUALTPsd0unUJ0D8wgX7y3CoPbVyfarJ+VhQFnphh5LnNGLCTODpuP2KO7jodsF"}, "assumedRoleUser": {"assumedRoleId": "AROAMY611GPC0EPB1P0F9:2132267588865880227", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/2132267588865880227"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49a6a39b-a68f-4697-af2c-39fe64d173c4", "record_id": "flaws_cloudtrail:0000539:49a6a39b-a68f-4697-af2c-39fe64d173c4", "row_index": 539, "timestamp": "2018-08-06T16:06:07Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/2132267588865880227", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:2132267588865880227", "user_name": null, "access_key_id": "ASIA3MHXD7M07G2HQDDQ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49a6a39b-a68f-4697-af2c-39fe64d173c4", "eventTime": "2018-08-06T16:06:07Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The user with name test cannot be found.", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:2132267588865880227", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/2132267588865880227", "accountId": "811596193553", "accessKeyId": "ASIA3MHXD7M07G2HQDDQ", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:06:06Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"userName": "test"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb08d905-4d74-4608-b456-97b14af91038", "record_id": "flaws_cloudtrail:0000540:eb08d905-4d74-4608-b456-97b14af91038", "row_index": 540, "timestamp": "2018-08-06T16:06:07Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/2132267588865880227", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:2132267588865880227", "user_name": null, "access_key_id": "ASIA3MHXD7M07G2HQDDQ", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 997, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb08d905-4d74-4608-b456-97b14af91038", "eventTime": "2018-08-06T16:06:07Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:2132267588865880227", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/2132267588865880227", "accountId": "811596193553", "accessKeyId": "ASIA3MHXD7M07G2HQDDQ", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:06:06Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2234e48-cccd-4938-b8c4-34ff934833a65", "record_id": "flaws_cloudtrail:0000541:f2234e48-cccd-4938-b8c4-34ff934833a65", "row_index": 541, "timestamp": "2018-08-06T16:06:25Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4115412295494258651", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4115412295494258651", "user_name": null, "access_key_id": "ASIA0Y7HWEL8WV6GI2AS", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2234e48-cccd-4938-b8c4-34ff934833a65", "eventTime": "2018-08-06T16:06:25Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The user with name test cannot be found.", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4115412295494258651", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4115412295494258651", "accountId": "811596193553", "accessKeyId": "ASIA0Y7HWEL8WV6GI2AS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:06:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"userName": "test"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5617a585-2c77-426b-b470-a799e4d7d8b0", "record_id": "flaws_cloudtrail:0000542:5617a585-2c77-426b-b470-a799e4d7d8b0", "row_index": 542, "timestamp": "2018-08-06T16:06:25Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSAccount", "arn": null, "account_id": "369072737419", "principal_id": "AIDASO0WDNC3GCQUJIYAZ", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "aws-sdk-go/1.4.14 (go1.9.2; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SummitRouteAudit"], "raw_record_size_bytes": 1503, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5617a585-2c77-426b-b470-a799e4d7d8b0", "eventTime": "2018-08-06T16:06:25Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "aws-sdk-go/1.4.14 (go1.9.2; darwin; amd64)", "awsRegion": "us-east-1", "userIdentity": {"type": "AWSAccount", "principalId": "AIDASO0WDNC3GCQUJIYAZ", "accountId": "369072737419"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "roleSessionName": "4115412295494258651", "durationSeconds": 900}, "responseElements": {"credentials": {"accessKeyId": "ASIA0Y7HWEL8WV6GI2AS", "expiration": "Aug 6, 2018 4:21:25 PM", "sessionToken": "FQoGZXIvYXdzEJr//////////wEaDC3iTHxEogPLEkQavSL7AXmNTQQ+KTElNSkyeY0HSspeATeZ1e6Q9w71O/+2qCfSLdg6kL4/S4+WCisbbQZeF12f99g59pt8h0zD9apeO0s4lj+nSFcWXvIKyVIcllNn7Ua/0zgERiTUlGIJgFbDzJR6KrG+I8eT+s3BGYAf01Z5DyaYkWLUBem3OhDjPizcaKMSLttJG2HeyrIhw+2mjfhMiE7LRQDdyylu9j6VbzUvHyzojREWnutvCIl3PBv/z3fzpU8C0uDpAQ5ai9PfS2L1+RgNcmsfO9mokGaW6N3Vzgi8F9iDp3N0k5xtIArwXM+OKVLzT2I1P1nDCTaiFGplbnNMdgmoTE42KIHkodsF"}, "assumedRoleUser": {"assumedRoleId": "AROAMY611GPC0EPB1P0F9:4115412295494258651", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4115412295494258651"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "273728bb-3897-4af5-b169-06e87219d1af", "record_id": "flaws_cloudtrail:0000543:273728bb-3897-4af5-b169-06e87219d1af", "row_index": 543, "timestamp": "2018-08-06T16:06:26Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4115412295494258651", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4115412295494258651", "user_name": null, "access_key_id": "ASIA0Y7HWEL8WV6GI2AS", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 997, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "273728bb-3897-4af5-b169-06e87219d1af", "eventTime": "2018-08-06T16:06:26Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4115412295494258651", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4115412295494258651", "accountId": "811596193553", "accessKeyId": "ASIA0Y7HWEL8WV6GI2AS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:06:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d6046c7-b54b-436b-abbb-97cf11022ff7", "record_id": "flaws_cloudtrail:0000544:9d6046c7-b54b-436b-abbb-97cf11022ff7", "row_index": 544, "timestamp": "2018-08-06T16:06:30Z", "event_type": "GenerateDataKey", "event_source": "kms.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4115412295494258651", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4115412295494258651", "user_name": null, "access_key_id": "ASIA6LN3GBRLPYK0C4L2", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "lightsail.amazonaws.com", "user_agent": "lightsail.amazonaws.com", "aws_region": "ap-south-1"}, "resource_arns": ["arn:aws:kms:ap-south-1:811596193553:key/6ef88f45-60b6-42ea-a522-93ab62f1d2e3"], "raw_record_size_bytes": 1331, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d6046c7-b54b-436b-abbb-97cf11022ff7", "eventTime": "2018-08-06T16:06:30Z", "eventName": "GenerateDataKey", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lightsail.amazonaws.com", "userAgent": "lightsail.amazonaws.com", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4115412295494258651", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4115412295494258651", "accountId": "811596193553", "accessKeyId": "ASIA6LN3GBRLPYK0C4L2", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:06:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}, "invokedBy": "lightsail.amazonaws.com"}, "requestParameters": {"keyId": "alias/aws/lightsail", "encryptionContext": {"*amzn-ddb-sig-alg*": "HmacSHA256/256", "*amzn-ddb-env-alg*": "AES/256", "account": "811596193553"}, "numberOfBytes": 32}, "resources": [{"ARN": "arn:aws:kms:ap-south-1:811596193553:key/6ef88f45-60b6-42ea-a522-93ab62f1d2e3", "accountId": "811596193553", "type": "AWS::KMS::Key"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e77e333e-fd2e-4100-bf8f-d1203f2ac6b9", "record_id": "flaws_cloudtrail:0000545:e77e333e-fd2e-4100-bf8f-d1203f2ac6b9", "row_index": 545, "timestamp": "2018-08-06T16:06:37Z", "event_type": "GetInstances", "event_source": "lightsail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4115412295494258651", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4115412295494258651", "user_name": null, "access_key_id": "ASIA0Y7HWEL8WV6GI2AS", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 989, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e77e333e-fd2e-4100-bf8f-d1203f2ac6b9", "eventTime": "2018-08-06T16:06:37Z", "eventName": "GetInstances", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4115412295494258651", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4115412295494258651", "accountId": "811596193553", "accessKeyId": "ASIA0Y7HWEL8WV6GI2AS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:06:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a32229b-6b81-457d-80ec-0c04cee13fda", "record_id": "flaws_cloudtrail:0000546:a32229b-6b81-457d-80ec-0c04cee13fda", "row_index": 546, "timestamp": "2018-08-06T16:06:40Z", "event_type": "GenerateDataKey", "event_source": "kms.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4115412295494258651", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4115412295494258651", "user_name": null, "access_key_id": "ASIA4T75GL7PXS5KC454", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "AWS Internal", "user_agent": "AWS Internal", "aws_region": "eu-west-3"}, "resource_arns": ["arn:aws:kms:eu-west-3:811596193553:key/9d2bcafd-8899-4b14-bb94-ea3aa4eaef72"], "raw_record_size_bytes": 1295, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a32229b-6b81-457d-80ec-0c04cee13fda", "eventTime": "2018-08-06T16:06:40Z", "eventName": "GenerateDataKey", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "AWS Internal", "awsRegion": "eu-west-3", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4115412295494258651", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4115412295494258651", "accountId": "811596193553", "accessKeyId": "ASIA4T75GL7PXS5KC454", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:06:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}, "invokedBy": "AWS Internal"}, "requestParameters": {"numberOfBytes": 32, "keyId": "alias/aws/lightsail", "encryptionContext": {"*amzn-ddb-sig-alg*": "HmacSHA256/256", "*amzn-ddb-env-alg*": "AES/256", "account": "811596193553"}}, "resources": [{"ARN": "arn:aws:kms:eu-west-3:811596193553:key/9d2bcafd-8899-4b14-bb94-ea3aa4eaef72", "accountId": "811596193553", "type": "AWS::KMS::Key"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99b07fed-fc64-4913-9d16-7b077301c8afb", "record_id": "flaws_cloudtrail:0000547:99b07fed-fc64-4913-9d16-7b077301c8afb", "row_index": 547, "timestamp": "2018-08-06T16:06:46Z", "event_type": "GetInstances", "event_source": "lightsail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4115412295494258651", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4115412295494258651", "user_name": null, "access_key_id": "ASIA0Y7HWEL8WV6GI2AS", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 989, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99b07fed-fc64-4913-9d16-7b077301c8afb", "eventTime": "2018-08-06T16:06:46Z", "eventName": "GetInstances", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "awsRegion": "eu-west-3", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4115412295494258651", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4115412295494258651", "accountId": "811596193553", "accessKeyId": "ASIA0Y7HWEL8WV6GI2AS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:06:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b75fae95-0915-4b55-9b87-6532c9fe39c4", "record_id": "flaws_cloudtrail:0000548:b75fae95-0915-4b55-9b87-6532c9fe39c4", "row_index": 548, "timestamp": "2018-08-06T16:06:49Z", "event_type": "GenerateDataKey", "event_source": "kms.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4115412295494258651", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4115412295494258651", "user_name": null, "access_key_id": "ASIA88XNJT7DAY9HI12A", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "lightsail.amazonaws.com", "user_agent": "lightsail.amazonaws.com", "aws_region": "eu-west-2"}, "resource_arns": ["arn:aws:kms:eu-west-2:811596193553:key/c072ef61-130e-4a95-ab1d-b1c419c9f2c2"], "raw_record_size_bytes": 1329, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b75fae95-0915-4b55-9b87-6532c9fe39c4", "eventTime": "2018-08-06T16:06:49Z", "eventName": "GenerateDataKey", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lightsail.amazonaws.com", "userAgent": "lightsail.amazonaws.com", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4115412295494258651", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4115412295494258651", "accountId": "811596193553", "accessKeyId": "ASIA88XNJT7DAY9HI12A", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:06:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}, "invokedBy": "lightsail.amazonaws.com"}, "requestParameters": {"encryptionContext": {"*amzn-ddb-sig-alg*": "HmacSHA256/256", "*amzn-ddb-env-alg*": "AES/256", "account": "811596193553"}, "numberOfBytes": 32, "keyId": "alias/aws/lightsail"}, "resources": [{"ARN": "arn:aws:kms:eu-west-2:811596193553:key/c072ef61-130e-4a95-ab1d-b1c419c9f2c2", "accountId": "811596193553", "type": "AWS::KMS::Key"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac6fc05b-fe45-42f5-996f-92655fd7c4cd", "record_id": "flaws_cloudtrail:0000549:ac6fc05b-fe45-42f5-996f-92655fd7c4cd", "row_index": 549, "timestamp": "2018-08-06T16:06:55Z", "event_type": "GetInstances", "event_source": "lightsail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4115412295494258651", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4115412295494258651", "user_name": null, "access_key_id": "ASIA0Y7HWEL8WV6GI2AS", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 988, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac6fc05b-fe45-42f5-996f-92655fd7c4cd", "eventTime": "2018-08-06T16:06:55Z", "eventName": "GetInstances", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4115412295494258651", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4115412295494258651", "accountId": "811596193553", "accessKeyId": "ASIA0Y7HWEL8WV6GI2AS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:06:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c6b46a8-b6e2-4c36-a87a-63afff2aae0e", "record_id": "flaws_cloudtrail:0000550:1c6b46a8-b6e2-4c36-a87a-63afff2aae0e", "row_index": 550, "timestamp": "2018-08-06T16:06:57Z", "event_type": "GenerateDataKey", "event_source": "kms.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4115412295494258651", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4115412295494258651", "user_name": null, "access_key_id": "ASIA2FJ8UQRF57U3CIX2", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "lightsail.amazonaws.com", "user_agent": "lightsail.amazonaws.com", "aws_region": "eu-west-1"}, "resource_arns": ["arn:aws:kms:eu-west-1:811596193553:key/56adddbf-ecf3-48d0-9558-add76fe166e1"], "raw_record_size_bytes": 1329, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c6b46a8-b6e2-4c36-a87a-63afff2aae0e", "eventTime": "2018-08-06T16:06:57Z", "eventName": "GenerateDataKey", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lightsail.amazonaws.com", "userAgent": "lightsail.amazonaws.com", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4115412295494258651", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4115412295494258651", "accountId": "811596193553", "accessKeyId": "ASIA2FJ8UQRF57U3CIX2", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:06:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}, "invokedBy": "lightsail.amazonaws.com"}, "requestParameters": {"numberOfBytes": 32, "encryptionContext": {"*amzn-ddb-sig-alg*": "HmacSHA256/256", "*amzn-ddb-env-alg*": "AES/256", "account": "811596193553"}, "keyId": "alias/aws/lightsail"}, "resources": [{"ARN": "arn:aws:kms:eu-west-1:811596193553:key/56adddbf-ecf3-48d0-9558-add76fe166e1", "accountId": "811596193553", "type": "AWS::KMS::Key"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b52b80c9-a8c3-4da8-8091-7fcbee50dd8d", "record_id": "flaws_cloudtrail:0000551:b52b80c9-a8c3-4da8-8091-7fcbee50dd8d", "row_index": 551, "timestamp": "2018-08-06T16:07:03Z", "event_type": "GetInstances", "event_source": "lightsail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4115412295494258651", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4115412295494258651", "user_name": null, "access_key_id": "ASIA0Y7HWEL8WV6GI2AS", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 988, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b52b80c9-a8c3-4da8-8091-7fcbee50dd8d", "eventTime": "2018-08-06T16:07:03Z", "eventName": "GetInstances", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4115412295494258651", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4115412295494258651", "accountId": "811596193553", "accessKeyId": "ASIA0Y7HWEL8WV6GI2AS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:06:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f297a286-f667-4ffb-b7fc-49022eef5174", "record_id": "flaws_cloudtrail:0000552:f297a286-f667-4ffb-b7fc-49022eef5174", "row_index": 552, "timestamp": "2018-08-06T16:07:06Z", "event_type": "GenerateDataKey", "event_source": "kms.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4115412295494258651", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4115412295494258651", "user_name": null, "access_key_id": "ASIANR3JPSHNVHIHWSFU", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "AWS Internal", "user_agent": "AWS Internal", "aws_region": "ap-northeast-2"}, "resource_arns": ["arn:aws:kms:ap-northeast-2:811596193553:key/405e36fc-81bf-4f3a-9026-1b1ae2d45bde"], "raw_record_size_bytes": 1306, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f297a286-f667-4ffb-b7fc-49022eef5174", "eventTime": "2018-08-06T16:07:06Z", "eventName": "GenerateDataKey", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "AWS Internal", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4115412295494258651", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4115412295494258651", "accountId": "811596193553", "accessKeyId": "ASIANR3JPSHNVHIHWSFU", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:06:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}, "invokedBy": "AWS Internal"}, "requestParameters": {"numberOfBytes": 32, "encryptionContext": {"*amzn-ddb-sig-alg*": "HmacSHA256/256", "*amzn-ddb-env-alg*": "AES/256", "account": "811596193553"}, "keyId": "alias/aws/lightsail"}, "resources": [{"ARN": "arn:aws:kms:ap-northeast-2:811596193553:key/405e36fc-81bf-4f3a-9026-1b1ae2d45bde", "accountId": "811596193553", "type": "AWS::KMS::Key"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0fbd85a6-e24d-4289-a0cf-2cd30ef5dfa1", "record_id": "flaws_cloudtrail:0000553:0fbd85a6-e24d-4289-a0cf-2cd30ef5dfa1", "row_index": 553, "timestamp": "2018-08-06T16:07:12Z", "event_type": "GetInstances", "event_source": "lightsail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4115412295494258651", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4115412295494258651", "user_name": null, "access_key_id": "ASIA0Y7HWEL8WV6GI2AS", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 993, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0fbd85a6-e24d-4289-a0cf-2cd30ef5dfa1", "eventTime": "2018-08-06T16:07:12Z", "eventName": "GetInstances", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4115412295494258651", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4115412295494258651", "accountId": "811596193553", "accessKeyId": "ASIA0Y7HWEL8WV6GI2AS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:06:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2759f251-52a2-4ef3-95be-6991ace45545", "record_id": "flaws_cloudtrail:0000554:2759f251-52a2-4ef3-95be-6991ace45545", "row_index": 554, "timestamp": "2018-08-06T16:07:15Z", "event_type": "GenerateDataKey", "event_source": "kms.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4115412295494258651", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4115412295494258651", "user_name": null, "access_key_id": "ASIA7U4IFVXWZ6WAQ0JB", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "lightsail.amazonaws.com", "user_agent": "lightsail.amazonaws.com", "aws_region": "ap-northeast-1"}, "resource_arns": ["arn:aws:kms:ap-northeast-1:811596193553:key/0f70a8af-5b81-4581-a3ab-56c7d8d0c4b0"], "raw_record_size_bytes": 1339, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2759f251-52a2-4ef3-95be-6991ace45545", "eventTime": "2018-08-06T16:07:15Z", "eventName": "GenerateDataKey", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lightsail.amazonaws.com", "userAgent": "lightsail.amazonaws.com", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4115412295494258651", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4115412295494258651", "accountId": "811596193553", "accessKeyId": "ASIA7U4IFVXWZ6WAQ0JB", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:06:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}, "invokedBy": "lightsail.amazonaws.com"}, "requestParameters": {"keyId": "alias/aws/lightsail", "encryptionContext": {"*amzn-ddb-sig-alg*": "HmacSHA256/256", "*amzn-ddb-env-alg*": "AES/256", "account": "811596193553"}, "numberOfBytes": 32}, "resources": [{"ARN": "arn:aws:kms:ap-northeast-1:811596193553:key/0f70a8af-5b81-4581-a3ab-56c7d8d0c4b0", "accountId": "811596193553", "type": "AWS::KMS::Key"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "602b3e56-d796-4dbf-a316-8dcc4a47c2d5", "record_id": "flaws_cloudtrail:0000555:602b3e56-d796-4dbf-a316-8dcc4a47c2d5", "row_index": 555, "timestamp": "2018-08-06T16:07:25Z", "event_type": "GetInstances", "event_source": "lightsail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4115412295494258651", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4115412295494258651", "user_name": null, "access_key_id": "ASIA0Y7HWEL8WV6GI2AS", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 992, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "602b3e56-d796-4dbf-a316-8dcc4a47c2d5", "eventTime": "2018-08-06T16:07:25Z", "eventName": "GetInstances", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4115412295494258651", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4115412295494258651", "accountId": "811596193553", "accessKeyId": "ASIA0Y7HWEL8WV6GI2AS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:06:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba21aae3-e2fb-4f46-91d5-b53f808ef29a", "record_id": "flaws_cloudtrail:0000556:ba21aae3-e2fb-4f46-91d5-b53f808ef29a", "row_index": 556, "timestamp": "2018-08-06T16:07:33Z", "event_type": "GenerateDataKey", "event_source": "kms.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4115412295494258651", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4115412295494258651", "user_name": null, "access_key_id": "ASIAW6M97NXWNLSA0K0O", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "AWS Internal", "user_agent": "AWS Internal", "aws_region": "ca-central-1"}, "resource_arns": ["arn:aws:kms:ca-central-1:811596193553:key/333f3701-d6b9-433a-8dbc-b914de8c3c46"], "raw_record_size_bytes": 1302, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba21aae3-e2fb-4f46-91d5-b53f808ef29a", "eventTime": "2018-08-06T16:07:33Z", "eventName": "GenerateDataKey", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "AWS Internal", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4115412295494258651", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4115412295494258651", "accountId": "811596193553", "accessKeyId": "ASIAW6M97NXWNLSA0K0O", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:06:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}, "invokedBy": "AWS Internal"}, "requestParameters": {"keyId": "alias/aws/lightsail", "encryptionContext": {"*amzn-ddb-sig-alg*": "HmacSHA256/256", "*amzn-ddb-env-alg*": "AES/256", "account": "811596193553"}, "numberOfBytes": 32}, "resources": [{"ARN": "arn:aws:kms:ca-central-1:811596193553:key/333f3701-d6b9-433a-8dbc-b914de8c3c46", "accountId": "811596193553", "type": "AWS::KMS::Key"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81f7110e-fa42-4c24-aeb6-a7236adf735f", "record_id": "flaws_cloudtrail:0000557:81f7110e-fa42-4c24-aeb6-a7236adf735f", "row_index": 557, "timestamp": "2018-08-06T16:07:38Z", "event_type": "GetInstances", "event_source": "lightsail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4115412295494258651", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4115412295494258651", "user_name": null, "access_key_id": "ASIA0Y7HWEL8WV6GI2AS", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 991, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81f7110e-fa42-4c24-aeb6-a7236adf735f", "eventTime": "2018-08-06T16:07:38Z", "eventName": "GetInstances", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4115412295494258651", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4115412295494258651", "accountId": "811596193553", "accessKeyId": "ASIA0Y7HWEL8WV6GI2AS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:06:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ab1f1ff-11c1-409a-a860-63aac20e27e0", "record_id": "flaws_cloudtrail:0000558:8ab1f1ff-11c1-409a-a860-63aac20e27e0", "row_index": 558, "timestamp": "2018-08-06T16:07:42Z", "event_type": "GenerateDataKey", "event_source": "kms.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4115412295494258651", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4115412295494258651", "user_name": null, "access_key_id": "ASIA980Z8JFQXFU4WPH3", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "lightsail.amazonaws.com", "user_agent": "lightsail.amazonaws.com", "aws_region": "ap-southeast-1"}, "resource_arns": ["arn:aws:kms:ap-southeast-1:811596193553:key/f350ffc4-413d-4518-906c-d154df0c9d8d"], "raw_record_size_bytes": 1339, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ab1f1ff-11c1-409a-a860-63aac20e27e0", "eventTime": "2018-08-06T16:07:42Z", "eventName": "GenerateDataKey", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lightsail.amazonaws.com", "userAgent": "lightsail.amazonaws.com", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4115412295494258651", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4115412295494258651", "accountId": "811596193553", "accessKeyId": "ASIA980Z8JFQXFU4WPH3", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:06:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}, "invokedBy": "lightsail.amazonaws.com"}, "requestParameters": {"keyId": "alias/aws/lightsail", "numberOfBytes": 32, "encryptionContext": {"*amzn-ddb-sig-alg*": "HmacSHA256/256", "*amzn-ddb-env-alg*": "AES/256", "account": "811596193553"}}, "resources": [{"ARN": "arn:aws:kms:ap-southeast-1:811596193553:key/f350ffc4-413d-4518-906c-d154df0c9d8d", "accountId": "811596193553", "type": "AWS::KMS::Key"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2ad327d-455d-437b-9f36-ea131a9acc04", "record_id": "flaws_cloudtrail:0000559:b2ad327d-455d-437b-9f36-ea131a9acc04", "row_index": 559, "timestamp": "2018-08-06T16:07:48Z", "event_type": "GetInstances", "event_source": "lightsail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4115412295494258651", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:4115412295494258651", "user_name": null, "access_key_id": "ASIA0Y7HWEL8WV6GI2AS", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 993, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2ad327d-455d-437b-9f36-ea131a9acc04", "eventTime": "2018-08-06T16:07:48Z", "eventName": "GetInstances", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:4115412295494258651", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4115412295494258651", "accountId": "811596193553", "accessKeyId": "ASIA0Y7HWEL8WV6GI2AS", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:06:25Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01cbcc8c-6d78-4670-b49c-0fbea7df73f2", "record_id": "flaws_cloudtrail:0000560:01cbcc8c-6d78-4670-b49c-0fbea7df73f2", "row_index": 560, "timestamp": "2018-08-06T16:08:22Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSAccount", "arn": null, "account_id": "369072737419", "principal_id": "AIDASO0WDNC3GCQUJIYAZ", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "aws-sdk-go/1.4.14 (go1.9.2; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SummitRouteAudit"], "raw_record_size_bytes": 1503, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01cbcc8c-6d78-4670-b49c-0fbea7df73f2", "eventTime": "2018-08-06T16:08:22Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "aws-sdk-go/1.4.14 (go1.9.2; darwin; amd64)", "awsRegion": "us-east-1", "userIdentity": {"type": "AWSAccount", "principalId": "AIDASO0WDNC3GCQUJIYAZ", "accountId": "369072737419"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "roleSessionName": "1229551211742381686", "durationSeconds": 900}, "responseElements": {"credentials": {"accessKeyId": "ASIAUOD1N29YDN38J46H", "expiration": "Aug 6, 2018 4:23:22 PM", "sessionToken": "FQoGZXIvYXdzEJr//////////wEaDGKGBpRz1OTOndAazSL7ASITOyQA8GsDmii9XGIlT7yUYgcy9S8ILUqChoFAAX2OONcMdndCgkWNc3Uq5I9wXgA3pCzJTsc4LabwjNPxrVLi79rGgllF7XpRD/H2aV/91TZ0owBcIKCqBI4JSIGkw0tXgaMcXYrS+4tI1/ADFlQBYaE5d7qP2ZTdwxKSGpeonRuQ9mtvjtEMRQ1htt0tWBXlOC1XUcspGovZLXIYvQsvCbBTgdrYL0+I5r3hKcqdJBbg6+PocHbra5Vf21ve1cDNh93VBvPgvwLVWL/XuyB7bXC2Zrq7x+0+pLhOu5MdkVAxAWFg63wWOeUQpemtirvsR4sbK6ZG14CkKPbkodsF"}, "assumedRoleUser": {"assumedRoleId": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0026b92-55ac-4a42-ba76-a29db66f4590", "record_id": "flaws_cloudtrail:0000561:e0026b92-55ac-4a42-ba76-a29db66f4590", "row_index": 561, "timestamp": "2018-08-06T16:08:23Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "user_name": null, "access_key_id": "ASIAUOD1N29YDN38J46H", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0026b92-55ac-4a42-ba76-a29db66f4590", "eventTime": "2018-08-06T16:08:23Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The user with name test cannot be found.", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "accountId": "811596193553", "accessKeyId": "ASIAUOD1N29YDN38J46H", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:08:22Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"userName": "test"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a81ef9d-27c8-426c-b2ca-79af5f5e547f", "record_id": "flaws_cloudtrail:0000562:9a81ef9d-27c8-426c-b2ca-79af5f5e547f", "row_index": 562, "timestamp": "2018-08-06T16:08:23Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "user_name": null, "access_key_id": "ASIAUOD1N29YDN38J46H", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 997, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a81ef9d-27c8-426c-b2ca-79af5f5e547f", "eventTime": "2018-08-06T16:08:23Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "accountId": "811596193553", "accessKeyId": "ASIAUOD1N29YDN38J46H", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:08:22Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c000439-02b3-4a22-a45b-6a1b65e7a1c4", "record_id": "flaws_cloudtrail:0000563:7c000439-02b3-4a22-a45b-6a1b65e7a1c4", "row_index": 563, "timestamp": "2018-08-06T16:08:25Z", "event_type": "GetLoadBalancers", "event_source": "lightsail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "user_name": null, "access_key_id": "ASIAUOD1N29YDN38J46H", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 993, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c000439-02b3-4a22-a45b-6a1b65e7a1c4", "eventTime": "2018-08-06T16:08:25Z", "eventName": "GetLoadBalancers", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "accountId": "811596193553", "accessKeyId": "ASIAUOD1N29YDN38J46H", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:08:22Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec74741-f0ea-4b97-b911-192b2761a044", "record_id": "flaws_cloudtrail:0000564:ec74741-f0ea-4b97-b911-192b2761a044", "row_index": 564, "timestamp": "2018-08-06T16:08:26Z", "event_type": "GetLoadBalancers", "event_source": "lightsail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "user_name": null, "access_key_id": "ASIAUOD1N29YDN38J46H", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 991, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec74741-f0ea-4b97-b911-192b2761a044", "eventTime": "2018-08-06T16:08:26Z", "eventName": "GetLoadBalancers", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "awsRegion": "eu-west-3", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "accountId": "811596193553", "accessKeyId": "ASIAUOD1N29YDN38J46H", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:08:22Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "428b9055-b4d9-416c-a458-f54c58f2793e", "record_id": "flaws_cloudtrail:0000565:428b9055-b4d9-416c-a458-f54c58f2793e", "row_index": 565, "timestamp": "2018-08-06T16:08:28Z", "event_type": "GetLoadBalancers", "event_source": "lightsail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "user_name": null, "access_key_id": "ASIAUOD1N29YDN38J46H", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 992, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "428b9055-b4d9-416c-a458-f54c58f2793e", "eventTime": "2018-08-06T16:08:28Z", "eventName": "GetLoadBalancers", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "accountId": "811596193553", "accessKeyId": "ASIAUOD1N29YDN38J46H", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:08:22Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6fb34de-8976-48aa-8c35-3da438c2f6b0", "record_id": "flaws_cloudtrail:0000566:d6fb34de-8976-48aa-8c35-3da438c2f6b0", "row_index": 566, "timestamp": "2018-08-06T16:08:29Z", "event_type": "GetLoadBalancers", "event_source": "lightsail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "user_name": null, "access_key_id": "ASIAUOD1N29YDN38J46H", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 992, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6fb34de-8976-48aa-8c35-3da438c2f6b0", "eventTime": "2018-08-06T16:08:29Z", "eventName": "GetLoadBalancers", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "accountId": "811596193553", "accessKeyId": "ASIAUOD1N29YDN38J46H", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:08:22Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7dfc7dd0-e52e-4e1c-8ab9-c4a35595e82d", "record_id": "flaws_cloudtrail:0000567:7dfc7dd0-e52e-4e1c-8ab9-c4a35595e82d", "row_index": 567, "timestamp": "2018-08-06T16:08:30Z", "event_type": "GetLoadBalancers", "event_source": "lightsail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "user_name": null, "access_key_id": "ASIAUOD1N29YDN38J46H", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 993, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7dfc7dd0-e52e-4e1c-8ab9-c4a35595e82d", "eventTime": "2018-08-06T16:08:30Z", "eventName": "GetLoadBalancers", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "accountId": "811596193553", "accessKeyId": "ASIAUOD1N29YDN38J46H", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:08:22Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81703e9-3dbf-4892-a066-f8b60d3d8a40", "record_id": "flaws_cloudtrail:0000568:81703e9-3dbf-4892-a066-f8b60d3d8a40", "row_index": 568, "timestamp": "2018-08-06T16:08:32Z", "event_type": "GetLoadBalancers", "event_source": "lightsail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "user_name": null, "access_key_id": "ASIAUOD1N29YDN38J46H", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 996, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81703e9-3dbf-4892-a066-f8b60d3d8a40", "eventTime": "2018-08-06T16:08:32Z", "eventName": "GetLoadBalancers", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "accountId": "811596193553", "accessKeyId": "ASIAUOD1N29YDN38J46H", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:08:22Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa055d22-360e-4751-b6f9-239268c174", "record_id": "flaws_cloudtrail:0000569:fa055d22-360e-4751-b6f9-239268c174", "row_index": 569, "timestamp": "2018-08-06T16:08:41Z", "event_type": "GetLoadBalancers", "event_source": "lightsail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "user_name": null, "access_key_id": "ASIAUOD1N29YDN38J46H", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 993, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa055d22-360e-4751-b6f9-239268c174", "eventTime": "2018-08-06T16:08:41Z", "eventName": "GetLoadBalancers", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "accountId": "811596193553", "accessKeyId": "ASIAUOD1N29YDN38J46H", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:08:22Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "402136ea4-1439-4b7f-b066-d06044c371ba", "record_id": "flaws_cloudtrail:0000570:402136ea4-1439-4b7f-b066-d06044c371ba", "row_index": 570, "timestamp": "2018-08-06T16:08:42Z", "event_type": "GetLoadBalancers", "event_source": "lightsail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "user_name": null, "access_key_id": "ASIAUOD1N29YDN38J46H", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 998, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "402136ea4-1439-4b7f-b066-d06044c371ba", "eventTime": "2018-08-06T16:08:42Z", "eventName": "GetLoadBalancers", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "accountId": "811596193553", "accessKeyId": "ASIAUOD1N29YDN38J46H", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:08:22Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e171ad7b-9f9b-4b74-bbbd-07269cc08719", "record_id": "flaws_cloudtrail:0000571:e171ad7b-9f9b-4b74-bbbd-07269cc08719", "row_index": 571, "timestamp": "2018-08-06T16:08:45Z", "event_type": "GenerateDataKey", "event_source": "kms.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "user_name": null, "access_key_id": "ASIAU4QU2IJ7P0KOPC9P", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "lightsail.amazonaws.com", "user_agent": "lightsail.amazonaws.com", "aws_region": "ap-southeast-2"}, "resource_arns": ["arn:aws:kms:ap-southeast-2:811596193553:key/39f741180-676c-4cdb-8c23-369bc095896e"], "raw_record_size_bytes": 1340, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e171ad7b-9f9b-4b74-bbbd-07269cc08719", "eventTime": "2018-08-06T16:08:45Z", "eventName": "GenerateDataKey", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lightsail.amazonaws.com", "userAgent": "lightsail.amazonaws.com", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "accountId": "811596193553", "accessKeyId": "ASIAU4QU2IJ7P0KOPC9P", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:08:22Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}, "invokedBy": "lightsail.amazonaws.com"}, "requestParameters": {"keyId": "alias/aws/lightsail", "numberOfBytes": 32, "encryptionContext": {"*amzn-ddb-sig-alg*": "HmacSHA256/256", "*amzn-ddb-env-alg*": "AES/256", "account": "811596193553"}}, "resources": [{"ARN": "arn:aws:kms:ap-southeast-2:811596193553:key/39f741180-676c-4cdb-8c23-369bc095896e", "accountId": "811596193553", "type": "AWS::KMS::Key"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "148907b9-5518-4d9a-a6bf-777f4a757a56", "record_id": "flaws_cloudtrail:0000572:148907b9-5518-4d9a-a6bf-777f4a757a56", "row_index": 572, "timestamp": "2018-08-06T16:08:52Z", "event_type": "GetLoadBalancers", "event_source": "lightsail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "user_name": null, "access_key_id": "ASIAUOD1N29YDN38J46H", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 997, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "148907b9-5518-4d9a-a6bf-777f4a757a56", "eventTime": "2018-08-06T16:08:52Z", "eventName": "GetLoadBalancers", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "accountId": "811596193553", "accessKeyId": "ASIAUOD1N29YDN38J46H", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:08:22Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c144c38f-7bbd-41da-968e-92174b13cf93", "record_id": "flaws_cloudtrail:0000573:c144c38f-7bbd-41da-968e-92174b13cf93", "row_index": 573, "timestamp": "2018-08-06T16:08:54Z", "event_type": "GenerateDataKey", "event_source": "kms.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "user_name": null, "access_key_id": "ASIAK4BLZBEGXRU89GP0", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "lightsail.amazonaws.com", "user_agent": "lightsail.amazonaws.com", "aws_region": "eu-central-1"}, "resource_arns": ["arn:aws:kms:eu-central-1:811596193553:key/291eab4f-a7dd-48aa-bb7d-35738037a5df"], "raw_record_size_bytes": 1334, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c144c38f-7bbd-41da-968e-92174b13cf93", "eventTime": "2018-08-06T16:08:54Z", "eventName": "GenerateDataKey", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lightsail.amazonaws.com", "userAgent": "lightsail.amazonaws.com", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "accountId": "811596193553", "accessKeyId": "ASIAK4BLZBEGXRU89GP0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:08:22Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}, "invokedBy": "lightsail.amazonaws.com"}, "requestParameters": {"numberOfBytes": 32, "keyId": "alias/aws/lightsail", "encryptionContext": {"*amzn-ddb-sig-alg*": "HmacSHA256/256", "*amzn-ddb-env-alg*": "AES/256", "account": "811596193553"}}, "resources": [{"ARN": "arn:aws:kms:eu-central-1:811596193553:key/291eab4f-a7dd-48aa-bb7d-35738037a5df", "accountId": "811596193553", "type": "AWS::KMS::Key"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63939a2a-d4fc-4711-9563-738886a", "record_id": "flaws_cloudtrail:0000574:63939a2a-d4fc-4711-9563-738886a", "row_index": 574, "timestamp": "2018-08-06T16:09:00Z", "event_type": "GetLoadBalancers", "event_source": "lightsail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "user_name": null, "access_key_id": "ASIAUOD1N29YDN38J46H", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 990, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63939a2a-d4fc-4711-9563-738886a", "eventTime": "2018-08-06T16:09:00Z", "eventName": "GetLoadBalancers", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "accountId": "811596193553", "accessKeyId": "ASIAUOD1N29YDN38J46H", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:08:22Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf3b9d15-87d2-4762-b45d-2ecca083d0e9", "record_id": "flaws_cloudtrail:0000575:cf3b9d15-87d2-4762-b45d-2ecca083d0e9", "row_index": 575, "timestamp": "2018-08-06T16:09:02Z", "event_type": "GenerateDataKey", "event_source": "kms.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "user_name": null, "access_key_id": "ASIASLDB9XFAJ5V5WFI0", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "lightsail.amazonaws.com", "user_agent": "lightsail.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:kms:us-east-1:811596193553:key/d20504bd-8234-49f4-ae0a-3344893e42a7"], "raw_record_size_bytes": 1330, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf3b9d15-87d2-4762-b45d-2ecca083d0e9", "eventTime": "2018-08-06T16:09:02Z", "eventName": "GenerateDataKey", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lightsail.amazonaws.com", "userAgent": "lightsail.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "accountId": "811596193553", "accessKeyId": "ASIASLDB9XFAJ5V5WFI0", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:08:22Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}, "invokedBy": "lightsail.amazonaws.com"}, "requestParameters": {"numberOfBytes": 32, "encryptionContext": {"*amzn-ddb-sig-alg*": "HmacSHA256/256", "*amzn-ddb-env-alg*": "AES/256", "account": "811596193553"}, "keyId": "alias/aws/lightsail"}, "resources": [{"ARN": "arn:aws:kms:us-east-1:811596193553:key/d20504bd-8234-49f4-ae0a-3344893e42a7", "accountId": "811596193553", "type": "AWS::KMS::Key"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6bfeaf60-3c11-4ec2-9304-1963f2b548d1", "record_id": "flaws_cloudtrail:0000576:6bfeaf60-3c11-4ec2-9304-1963f2b548d1", "row_index": 576, "timestamp": "2018-08-06T16:09:03Z", "event_type": "GetLoadBalancers", "event_source": "lightsail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "user_name": null, "access_key_id": "ASIAUOD1N29YDN38J46H", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 992, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6bfeaf60-3c11-4ec2-9304-1963f2b548d1", "eventTime": "2018-08-06T16:09:03Z", "eventName": "GetLoadBalancers", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "accountId": "811596193553", "accessKeyId": "ASIAUOD1N29YDN38J46H", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:08:22Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "599c6a3a-8b30-4f95-839f-67195d9e241b", "record_id": "flaws_cloudtrail:0000577:599c6a3a-8b30-4f95-839f-67195d9e241b", "row_index": 577, "timestamp": "2018-08-06T16:09:04Z", "event_type": "GenerateDataKey", "event_source": "kms.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "user_name": null, "access_key_id": "ASIAN70X63YZUF3WJ8WX", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "lightsail.amazonaws.com", "user_agent": "lightsail.amazonaws.com", "aws_region": "us-east-2"}, "resource_arns": ["arn:aws:kms:us-east-2:811596193553:key/ba47cbd4-200e-4fad-8db4-7b414d394b08"], "raw_record_size_bytes": 1328, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "599c6a3a-8b30-4f95-839f-67195d9e241b", "eventTime": "2018-08-06T16:09:04Z", "eventName": "GenerateDataKey", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lightsail.amazonaws.com", "userAgent": "lightsail.amazonaws.com", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "accountId": "811596193553", "accessKeyId": "ASIAN70X63YZUF3WJ8WX", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:08:22Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}, "invokedBy": "lightsail.amazonaws.com"}, "requestParameters": {"numberOfBytes": 32, "keyId": "alias/aws/lightsail", "encryptionContext": {"*amzn-ddb-sig-alg*": "HmacSHA256/256", "*amzn-ddb-env-alg*": "AES/256", "account": "811596193553"}}, "resources": [{"ARN": "arn:aws:kms:us-east-2:811596193553:key/ba47cbd4-200e-4fad-8db4-7b414d394b08", "accountId": "811596193553", "type": "AWS::KMS::Key"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7949affb-c90f-4a34-a056-685962ed15af", "record_id": "flaws_cloudtrail:0000578:7949affb-c90f-4a34-a056-685962ed15af", "row_index": 578, "timestamp": "2018-08-06T16:09:09Z", "event_type": "GetLoadBalancers", "event_source": "lightsail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "user_name": null, "access_key_id": "ASIAUOD1N29YDN38J46H", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 993, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7949affb-c90f-4a34-a056-685962ed15af", "eventTime": "2018-08-06T16:09:09Z", "eventName": "GetLoadBalancers", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "accountId": "811596193553", "accessKeyId": "ASIAUOD1N29YDN38J46H", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:08:22Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b30d274-d1d1-4d92-86b2-f12113b922", "record_id": "flaws_cloudtrail:0000579:7b30d274-d1d1-4d92-86b2-f12113b922", "row_index": 579, "timestamp": "2018-08-06T16:09:19Z", "event_type": "GenerateDataKey", "event_source": "kms.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "user_name": null, "access_key_id": "ASIAABVG39OCZJKO5Q10", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "lightsail.amazonaws.com", "user_agent": "lightsail.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:kms:us-west-2:811596193553:key/285af51d-8b8c-469b-8701-0b42c0f09452"], "raw_record_size_bytes": 1326, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b30d274-d1d1-4d92-86b2-f12113b922", "eventTime": "2018-08-06T16:09:19Z", "eventName": "GenerateDataKey", "eventSource": "kms.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lightsail.amazonaws.com", "userAgent": "lightsail.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "accountId": "811596193553", "accessKeyId": "ASIAABVG39OCZJKO5Q10", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:08:22Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}, "invokedBy": "lightsail.amazonaws.com"}, "requestParameters": {"numberOfBytes": 32, "keyId": "alias/aws/lightsail", "encryptionContext": {"*amzn-ddb-sig-alg*": "HmacSHA256/256", "*amzn-ddb-env-alg*": "AES/256", "account": "811596193553"}}, "resources": [{"ARN": "arn:aws:kms:us-west-2:811596193553:key/285af51d-8b8c-469b-8701-0b42c0f09452", "accountId": "811596193553", "type": "AWS::KMS::Key"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08f9b53f-c333-46d9-aff2-1be1bff4d360", "record_id": "flaws_cloudtrail:0000580:08f9b53f-c333-46d9-aff2-1be1bff4d360", "row_index": 580, "timestamp": "2018-08-06T16:09:25Z", "event_type": "GetLoadBalancers", "event_source": "lightsail.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "user_name": null, "access_key_id": "ASIAUOD1N29YDN38J46H", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 992, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08f9b53f-c333-46d9-aff2-1be1bff4d360", "eventTime": "2018-08-06T16:09:25Z", "eventName": "GetLoadBalancers", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "accountId": "811596193553", "accessKeyId": "ASIAUOD1N29YDN38J46H", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:08:22Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c430406d3-b400-4463-9f64-5821a1cda76e", "record_id": "flaws_cloudtrail:0000581:c430406d3-b400-4463-9f64-5821a1cda76e", "row_index": 581, "timestamp": "2018-08-06T16:09:26Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "user_name": null, "access_key_id": "ASIAUOD1N29YDN38J46H", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 1018, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c430406d3-b400-4463-9f64-5821a1cda76e", "eventTime": "2018-08-06T16:09:26Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "awsRegion": "ap-south-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "accountId": "811596193553", "accessKeyId": "ASIAUOD1N29YDN38J46H", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:08:22Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef53ce51-6741-4ef7-8f91-fc24f933b612", "record_id": "flaws_cloudtrail:0000582:ef53ce51-6741-4ef7-8f91-fc24f933b612", "row_index": 582, "timestamp": "2018-08-06T16:09:27Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "user_name": null, "access_key_id": "ASIAUOD1N29YDN38J46H", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 1018, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef53ce51-6741-4ef7-8f91-fc24f933b612", "eventTime": "2018-08-06T16:09:27Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "awsRegion": "eu-west-3", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "accountId": "811596193553", "accessKeyId": "ASIAUOD1N29YDN38J46H", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:08:22Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbe4cf92-9b54-45da-a666-421940aa7bd62", "record_id": "flaws_cloudtrail:0000583:fbe4cf92-9b54-45da-a666-421940aa7bd62", "row_index": 583, "timestamp": "2018-08-06T16:09:28Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "user_name": null, "access_key_id": "ASIAUOD1N29YDN38J46H", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1018, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbe4cf92-9b54-45da-a666-421940aa7bd62", "eventTime": "2018-08-06T16:09:28Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "awsRegion": "eu-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "accountId": "811596193553", "accessKeyId": "ASIAUOD1N29YDN38J46H", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:08:22Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad4dc776-a854-410e-a816-e09318c2", "record_id": "flaws_cloudtrail:0000584:ad4dc776-a854-410e-a816-e09318c2", "row_index": 584, "timestamp": "2018-08-06T16:09:29Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "user_name": null, "access_key_id": "ASIAUOD1N29YDN38J46H", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1013, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad4dc776-a854-410e-a816-e09318c2", "eventTime": "2018-08-06T16:09:29Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "awsRegion": "eu-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "accountId": "811596193553", "accessKeyId": "ASIAUOD1N29YDN38J46H", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:08:22Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6661baa-0eca-4eaa-98b7-9a4ec7aaaa54", "record_id": "flaws_cloudtrail:0000585:d6661baa-0eca-4eaa-98b7-9a4ec7aaaa54", "row_index": 585, "timestamp": "2018-08-06T16:09:30Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "user_name": null, "access_key_id": "ASIAUOD1N29YDN38J46H", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1023, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6661baa-0eca-4eaa-98b7-9a4ec7aaaa54", "eventTime": "2018-08-06T16:09:30Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "accountId": "811596193553", "accessKeyId": "ASIAUOD1N29YDN38J46H", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:08:22Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "165935b62-df45-4131-b57a-954f7a996a86", "record_id": "flaws_cloudtrail:0000586:165935b62-df45-4131-b57a-954f7a996a86", "row_index": 586, "timestamp": "2018-08-06T16:09:31Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "user_name": null, "access_key_id": "ASIAUOD1N29YDN38J46H", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1023, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "165935b62-df45-4131-b57a-954f7a996a86", "eventTime": "2018-08-06T16:09:31Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "accountId": "811596193553", "accessKeyId": "ASIAUOD1N29YDN38J46H", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:08:22Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ac7bf87-0d95-4a53-a186-0d05f052d4c1", "record_id": "flaws_cloudtrail:0000587:1ac7bf87-0d95-4a53-a186-0d05f052d4c1", "row_index": 587, "timestamp": "2018-08-06T16:09:32Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "user_name": null, "access_key_id": "ASIAUOD1N29YDN38J46H", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1021, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ac7bf87-0d95-4a53-a186-0d05f052d4c1", "eventTime": "2018-08-06T16:09:32Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "awsRegion": "ca-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "accountId": "811596193553", "accessKeyId": "ASIAUOD1N29YDN38J46H", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:08:22Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c5f3a91-b56a-41ac-85bc-7566540e06c1", "record_id": "flaws_cloudtrail:0000588:0c5f3a91-b56a-41ac-85bc-7566540e06c1", "row_index": 588, "timestamp": "2018-08-06T16:09:32Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "user_name": null, "access_key_id": "ASIAUOD1N29YDN38J46H", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1018, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c5f3a91-b56a-41ac-85bc-7566540e06c1", "eventTime": "2018-08-06T16:09:32Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "awsRegion": "sa-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "accountId": "811596193553", "accessKeyId": "ASIAUOD1N29YDN38J46H", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:08:22Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b94ff6b1-7388-4727-b071-82041e55aa4", "record_id": "flaws_cloudtrail:0000589:b94ff6b1-7388-4727-b071-82041e55aa4", "row_index": 589, "timestamp": "2018-08-06T16:09:33Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "user_name": null, "access_key_id": "ASIAUOD1N29YDN38J46H", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 1021, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b94ff6b1-7388-4727-b071-82041e55aa4", "eventTime": "2018-08-06T16:09:33Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "accountId": "811596193553", "accessKeyId": "ASIAUOD1N29YDN38J46H", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:08:22Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fcfff89-eaa8-43f1-a3f1-da74ea64884f", "record_id": "flaws_cloudtrail:0000590:1fcfff89-eaa8-43f1-a3f1-da74ea64884f", "row_index": 590, "timestamp": "2018-08-06T16:09:35Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "user_name": null, "access_key_id": "ASIAUOD1N29YDN38J46H", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1023, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fcfff89-eaa8-43f1-a3f1-da74ea64884f", "eventTime": "2018-08-06T16:09:35Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "accountId": "811596193553", "accessKeyId": "ASIAUOD1N29YDN38J46H", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:08:22Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "054cae8e-0abc-4a6d-89f6-552778ceb8", "record_id": "flaws_cloudtrail:0000591:054cae8e-0abc-4a6d-89f6-552778ceb8", "row_index": 591, "timestamp": "2018-08-06T16:09:36Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "user_name": null, "access_key_id": "ASIAUOD1N29YDN38J46H", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 1019, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "054cae8e-0abc-4a6d-89f6-552778ceb8", "eventTime": "2018-08-06T16:09:36Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "awsRegion": "eu-central-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "accountId": "811596193553", "accessKeyId": "ASIAUOD1N29YDN38J46H", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:08:22Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb5f6ea3-8763-46db-8610-2cae4a31d6b9", "record_id": "flaws_cloudtrail:0000592:eb5f6ea3-8763-46db-8610-2cae4a31d6b9", "row_index": 592, "timestamp": "2018-08-06T16:09:36Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "user_name": null, "access_key_id": "ASIAUOD1N29YDN38J46H", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1018, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb5f6ea3-8763-46db-8610-2cae4a31d6b9", "eventTime": "2018-08-06T16:09:36Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "accountId": "811596193553", "accessKeyId": "ASIAUOD1N29YDN38J46H", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:08:22Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ec328698-4963-4cec-b7dc-0f55302c5ed0", "record_id": "flaws_cloudtrail:0000593:6ec328698-4963-4cec-b7dc-0f55302c5ed0", "row_index": 593, "timestamp": "2018-08-06T16:09:36Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "user_name": null, "access_key_id": "ASIAUOD1N29YDN38J46H", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1020, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ec328698-4963-4cec-b7dc-0f55302c5ed0", "eventTime": "2018-08-06T16:09:36Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "awsRegion": "us-east-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "accountId": "811596193553", "accessKeyId": "ASIAUOD1N29YDN38J46H", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:08:22Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6fd30395-ba57-43aa-babe-d2f1eaccb404", "record_id": "flaws_cloudtrail:0000594:6fd30395-ba57-43aa-babe-d2f1eaccb404", "row_index": 594, "timestamp": "2018-08-06T16:09:37Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "user_name": null, "access_key_id": "ASIAUOD1N29YDN38J46H", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1018, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6fd30395-ba57-43aa-babe-d2f1eaccb404", "eventTime": "2018-08-06T16:09:37Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "awsRegion": "us-west-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "accountId": "811596193553", "accessKeyId": "ASIAUOD1N29YDN38J46H", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:08:22Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fe40906-c762-4374-b97b-c0f2c4704fd7", "record_id": "flaws_cloudtrail:0000595:1fe40906-c762-4374-b97b-c0f2c4704fd7", "row_index": 595, "timestamp": "2018-08-06T16:09:37Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "user_name": null, "access_key_id": "ASIAUOD1N29YDN38J46H", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1018, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fe40906-c762-4374-b97b-c0f2c4704fd7", "eventTime": "2018-08-06T16:09:37Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "Boto3/1.5.32 Python/3.6.4 Darwin/17.7.0 Botocore/1.8.50", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:1229551211742381686", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/1229551211742381686", "accountId": "811596193553", "accessKeyId": "ASIAUOD1N29YDN38J46H", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:08:22Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "278fc300-c4af-424b-bf15-c2b96b2f1b5f", "record_id": "flaws_cloudtrail:0000596:278fc300-c4af-424b-bf15-c2b96b2f1b5f", "row_index": 596, "timestamp": "2018-08-06T16:11:54Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1490, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "278fc300-c4af-424b-bf15-c2b96b2f1b5f", "eventTime": "2018-08-06T16:11:54Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIASRJ0A2WPRM711V09", "expiration": "Aug 6, 2018 10:33:59 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93068e44-cbb6-459e-bcfd-766b43c1e9e3", "record_id": "flaws_cloudtrail:0000597:93068e44-cbb6-459e-bcfd-766b43c1e9e3", "row_index": 597, "timestamp": "2018-08-06T16:19:47Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSAccount", "arn": null, "account_id": "369072737419", "principal_id": "AIDASO0WDNC3GCQUJIYAZ", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "aws-sdk-go/1.4.14 (go1.9.2; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SummitRouteAudit"], "raw_record_size_bytes": 1503, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93068e44-cbb6-459e-bcfd-766b43c1e9e3", "eventTime": "2018-08-06T16:19:47Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "aws-sdk-go/1.4.14 (go1.9.2; darwin; amd64)", "awsRegion": "us-east-1", "userIdentity": {"type": "AWSAccount", "principalId": "AIDASO0WDNC3GCQUJIYAZ", "accountId": "369072737419"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "roleSessionName": "4638301954493264218", "durationSeconds": 900}, "responseElements": {"credentials": {"accessKeyId": "ASIAMUNW7GAWXGWTJLN0", "expiration": "Aug 6, 2018 4:34:47 PM", "sessionToken": "FQoGZXIvYXdzEJr//////////wEaDBTFtuk9pZz562eTMSL7AacfrBW9a+PtikbMf5ZDbgB60HgwrKXc0gXx8aFLrKow1ynuF9hR0GYMQ2H0a+0KgWPPNjWvyJ/cQcTKfIWZfgaSTj7p79BXOufePboBC+pV8eShs6fK9E3Wtw4cy42Ix7YgEr9bRTwVuEiqjaX0ya0JCaloGoiwD2HfEy+A/2TfJAiz7CuOBZOzzESBpSxf729swPIkh767nRHf76Kn5zo1XagVr8q21SRr2MTbxATgKG7dzJZE7fZDBNyUQNFuxozTbPFtrtcHGouvrxVFlWAy1ys1Dgtu9M3PICROMWy2Rw0UJG3XXkOozkapWfPLTgh/TzkgS4Ek70KvKKPqodsF"}, "assumedRoleUser": {"assumedRoleId": "AROAMY611GPC0EPB1P0F9:4638301954493264218", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/4638301954493264218"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ca90c43-f5a6-4708-899d-fa68abde704e", "record_id": "flaws_cloudtrail:0000598:6ca90c43-f5a6-4708-899d-fa68abde704e", "row_index": 598, "timestamp": "2018-08-06T16:20:01Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSAccount", "arn": null, "account_id": "369072737419", "principal_id": "AIDASO0WDNC3GCQUJIYAZ", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "aws-sdk-go/1.4.14 (go1.9.2; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SummitRouteAudit"], "raw_record_size_bytes": 1503, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ca90c43-f5a6-4708-899d-fa68abde704e", "eventTime": "2018-08-06T16:20:01Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "aws-sdk-go/1.4.14 (go1.9.2; darwin; amd64)", "awsRegion": "us-east-1", "userIdentity": {"type": "AWSAccount", "principalId": "AIDASO0WDNC3GCQUJIYAZ", "accountId": "369072737419"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "roleSessionName": "6679596517004933078", "durationSeconds": 900}, "responseElements": {"credentials": {"accessKeyId": "ASIAV99HAL2B4TXD20KH", "expiration": "Aug 6, 2018 4:35:01 PM", "sessionToken": "FQoGZXIvYXdzEJr//////////wEaDFCwqDTQoGtZg6N3fyL7AVGXubYTQZtGYn5OOZ2tTF1dhAWgqSF61hkLpQDDLFb596GwxsgmpehnvmtRow3Xy3fECKQSummI7UD93mzLBK3a2ALchGOV3yVqXTiu1cZ8ToEWJjXaJbLOGcVh7ZV6mwxLc5BiY2wImxHzpgmNYr1kcGYwHMSbnUPcsHOiDUEvzsr3W9Tb9iY/FpA1VoM4TP7j3Va3lh1lwuGQLGQqI8VcmcgWCUStIgm8+2tpaki3+OLjRATtFaN06aB5F+l5vmUJKOp6oj3ZsGx3DLLM6GSWYXHa/jik/TgpHfacHBoeInCLrD+OdpIZUyxrZ23GwOB0UC6ddbGfDw2aKLHqodsF"}, "assumedRoleUser": {"assumedRoleId": "AROAMY611GPC0EPB1P0F9:6679596517004933078", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/6679596517004933078"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d51ca3e-16a8-4d00-b25f-a9420873a714", "record_id": "flaws_cloudtrail:0000599:9d51ca3e-16a8-4d00-b25f-a9420873a714", "row_index": 599, "timestamp": "2018-08-06T16:20:08Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "252.140.1.34", "user_agent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d51ca3e-16a8-4d00-b25f-a9420873a714", "eventTime": "2018-08-06T16:20:08Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.140.1.34", "userAgent": "aws-cli/1.15.68 Python/2.7.9 Windows/8 botocore/1.10.67", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c9201ba-f6c8-449e-a98d-640a5f21859e", "record_id": "flaws_cloudtrail:0000600:3c9201ba-f6c8-449e-a98d-640a5f21859e", "row_index": 600, "timestamp": "2018-08-06T16:20:10Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSAccount", "arn": null, "account_id": "369072737419", "principal_id": "AIDASO0WDNC3GCQUJIYAZ", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "aws-sdk-go/1.4.14 (go1.9.2; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SummitRouteAudit"], "raw_record_size_bytes": 1500, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c9201ba-f6c8-449e-a98d-640a5f21859e", "eventTime": "2018-08-06T16:20:10Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "aws-sdk-go/1.4.14 (go1.9.2; darwin; amd64)", "awsRegion": "us-east-1", "userIdentity": {"type": "AWSAccount", "principalId": "AIDASO0WDNC3GCQUJIYAZ", "accountId": "369072737419"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "roleSessionName": "8907333534331873584", "durationSeconds": 900}, "responseElements": {"credentials": {"accessKeyId": "ASIAXOP3CBPVZDJDQVGL", "expiration": "Aug 6, 2018 4:35:10 PM", "sessionToken": "FQoGZXIvYXdzEJr//////////wEaDE1XfgYl0ZXpDibVWCL7AfPr1/0Mrhb9OJaqH0fWeI8lYvAMZr2xmIF2mVHsdGTvi597lcPeslEdqmWUK91rLbiJ8cs4fSWHG3dpqf77S73LLtxx5rqKOTdcz+FBYSLs/UPiakgxRokpoPxEAAXY8zfFrjRtrYJIuioLZH12tkvv6gzYULmMUZWvjc/20/MShiIIwajQhpEWtMKQ7cz+Qdq20fkarx8c99GOgoZzdUD6hHh2n8f9cOjgDW/r8iJ3CPplb8huVcQVkhWljiIqGm5nxYbSZugbI7Yo1mOeH7Y5WNyjd1SXkvOCiMIr+FZ4w1hrwo4MJgsxHbcGBrposZZT5FBg8am59mXpKLrqodsF"}, "assumedRoleUser": {"assumedRoleId": "AROAMY611GPC0EPB1P0F9:8907333534331873584", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/8907333534331873584"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3cfeda9-b39f-4ded-92b6-db985d468918a", "record_id": "flaws_cloudtrail:0000601:e3cfeda9-b39f-4ded-92b6-db985d468918a", "row_index": 601, "timestamp": "2018-08-06T16:20:20Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSAccount", "arn": null, "account_id": "369072737419", "principal_id": "AIDASO0WDNC3GCQUJIYAZ", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.251.253.3", "user_agent": "aws-sdk-go/1.4.14 (go1.9.2; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:role/SummitRouteAudit"], "raw_record_size_bytes": 1505, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3cfeda9-b39f-4ded-92b6-db985d468918a", "eventTime": "2018-08-06T16:20:20Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "aws-sdk-go/1.4.14 (go1.9.2; darwin; amd64)", "awsRegion": "us-east-1", "userIdentity": {"type": "AWSAccount", "principalId": "AIDASO0WDNC3GCQUJIYAZ", "accountId": "369072737419"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "roleSessionName": "6723584414747222415", "durationSeconds": 900}, "responseElements": {"credentials": {"accessKeyId": "ASIAVNV6ZA7NYKHSH3TD", "expiration": "Aug 6, 2018 4:35:20 PM", "sessionToken": "FQoGZXIvYXdzEJr//////////wEaDHFc8Q03FOsk5EmkeCL7AbQnfJ1s38tQRTcwwJ65Ndcx42i//8VSgFMvmQ1GcMWNlGVTshKEPowToZbYfSBbX03XHb3jo0fCv5+Ej/FHS/ghCBm6ArGglathBmMBvpsAWvOc25Kwq9SFYDkeApYzOLpUXmfNe43zcz9erzUpQAvGI5eNC0ih5+F7Qh9+H6CgUA8KMs/SE657FNL8gMeK1uT6QHejkmatwlrkrrC1I558Zo4SZzlXk72xBf1XuwKHhSaHoRFBS0JGVrZfiOybMZls8DwJE62BlycxjJyr57CgKfp2i2s0sF3yQMxsF+dkDH4jyVSOcvmcVRISxF4RmIBd7JymSycqrgO+KMTqodsF"}, "assumedRoleUser": {"assumedRoleId": "AROAMY611GPC0EPB1P0F9:6723584414747222415", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/6723584414747222415"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77d223ea-f897-4300-a951-8b2e48731bf5", "record_id": "flaws_cloudtrail:0000602:77d223ea-f897-4300-a951-8b2e48731bf5", "row_index": 602, "timestamp": "2018-08-06T16:20:21Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/6723584414747222415", "account_id": "811596193553", "principal_id": "AROAMY611GPC0EPB1P0F9:6723584414747222415", "user_name": null, "access_key_id": "ASIAVNV6ZA7NYKHSH3TD", "session_issuer_arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "session_issuer_user_name": "SummitRouteAudit"}, "network": {"source_ip": "250.251.253.3", "user_agent": "aws-cli/1.14.66 Python/2.7.10 Darwin/17.7.0 botocore/1.9.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1045, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77d223ea-f897-4300-a951-8b2e48731bf5", "eventTime": "2018-08-06T16:20:21Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.251.253.3", "userAgent": "aws-cli/1.14.66 Python/2.7.10 Darwin/17.7.0 botocore/1.9.19", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAMY611GPC0EPB1P0F9:6723584414747222415", "arn": "arn:aws:sts::811596193553:assumed-role/SummitRouteAudit/6723584414747222415", "accountId": "811596193553", "accessKeyId": "ASIAVNV6ZA7NYKHSH3TD", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2018-08-06T16:20:20Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAMY611GPC0EPB1P0F9", "arn": "arn:aws:iam::811596193553:role/SummitRouteAudit", "accountId": "811596193553", "userName": "SummitRouteAudit"}}}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5fc9b3bc-f5a1-4826-a3a7-4c35612fda8c", "record_id": "flaws_cloudtrail:0000603:5fc9b3bc-f5a1-4826-a3a7-4c35612fda8c", "row_index": 603, "timestamp": "2018-08-06T16:22:43Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIA9ZYAC9ERGIOO9GXF", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "207.139.203.117", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1032, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5fc9b3bc-f5a1-4826-a3a7-4c35612fda8c", "eventTime": "2018-08-06T16:22:43Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "207.139.203.117", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIA9ZYAC9ERGIOO9GXF", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-08-06T16:22:43Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2018/08/06/[$LATEST]19cbf7a60fb9721ca06d4f16f3161f5b", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1390f1d-88ba-48a4-a54d-70f0005bad8d", "record_id": "flaws_cloudtrail:0000604:f1390f1d-88ba-48a4-a54d-70f0005bad8d", "row_index": 604, "timestamp": "2018-08-06T16:22:43Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1228, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1390f1d-88ba-48a4-a54d-70f0005bad8d", "eventTime": "2018-08-06T16:22:43Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIA9ZYAC9ERGIOO9GXF", "expiration": "Aug 7, 2018 4:22:43 AM", "sessionToken": "FQoGZXIvYXdzEJr//////////wEaDFaE0RS+h4h1iMGqCSLfAUCwWWN+xft5r1z/A4E0L30wP6p0ECjmeabuDD7S8tFB6BYiyKwMnoiXfiYWiavghzP6RJndHxzHCG0cYXXP9AwPVukHolr/PJQ3x/lOGegRzQ7jKlLU9l1UcsClFo3YR7OPWc8U5HOvlmNvGE9Ylx0jAP1Bsw685nIBRAUU7+xlKqXB+ACmjLllQaxPZsz7+Gfk1HE57j5kjoz0Cqe6vKCEV0hwYJ37Jv/wOv5RTtG4AN+Rn58yX33ltjuKV3SlRiy8AF0VyQlDrEE6hri8HouZeVrdyF0BLsewuaZezvgo0+uh2wU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}