Task: attack_reconstruction (flaws_cloudtrail)
Prompt: An IAM actor appears to validate their access, survey IAM identities and credentials, and then establish a new credentialed identity with permissions. Identify the responsible principal, the applicable MITRE ATT&CK technique, the supporting CloudTrail record_ids for each phase of the chain, and the impacted AWS assets they touched or created. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "028d047c-d4eb-4c57-827d-8832f1bbd1ec", "record_id": "flaws_cloudtrail:0000000:028d047c-d4eb-4c57-827d-8832f1bbd1ec", "row_index": 0, "timestamp": "2019-07-22T17:10:55Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "028d047c-d4eb-4c57-827d-8832f1bbd1ec", "eventTime": "2019-07-22T17:10:55Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81122e67-5296-4836-a930-9dc9da77586", "record_id": "flaws_cloudtrail:0000001:81122e67-5296-4836-a930-9dc9da77586", "row_index": 1, "timestamp": "2019-07-22T17:10:55Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81122e67-5296-4836-a930-9dc9da77586", "eventTime": "2019-07-22T17:10:55Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d56b948c-534f-4562-a096-3b735df4bac5", "record_id": "flaws_cloudtrail:0000002:d56b948c-534f-4562-a096-3b735df4bac5", "row_index": 2, "timestamp": "2019-07-22T17:10:55Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d56b948c-534f-4562-a096-3b735df4bac5", "eventTime": "2019-07-22T17:10:55Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "876b0dba-3cde-4530-9226-ece1ba0fce25", "record_id": "flaws_cloudtrail:0000003:876b0dba-3cde-4530-9226-ece1ba0fce25", "row_index": 3, "timestamp": "2019-07-22T17:10:55Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "876b0dba-3cde-4530-9226-ece1ba0fce25", "eventTime": "2019-07-22T17:10:55Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8df1101f-d7cc-43cb-916b-d033789de844", "record_id": "flaws_cloudtrail:0000004:8df1101f-d7cc-43cb-916b-d033789de844", "row_index": 4, "timestamp": "2019-07-22T17:10:55Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8df1101f-d7cc-43cb-916b-d033789de844", "eventTime": "2019-07-22T17:10:55Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cda9110f-d5f9-4fed-9b68-98b36e9bf401", "record_id": "flaws_cloudtrail:0000005:cda9110f-d5f9-4fed-9b68-98b36e9bf401", "row_index": 5, "timestamp": "2019-07-22T17:10:55Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cda9110f-d5f9-4fed-9b68-98b36e9bf401", "eventTime": "2019-07-22T17:10:55Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "645de99c-3cb0-4cf3-8420-21496f2d218", "record_id": "flaws_cloudtrail:0000006:645de99c-3cb0-4cf3-8420-21496f2d218", "row_index": 6, "timestamp": "2019-07-22T17:10:55Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "645de99c-3cb0-4cf3-8420-21496f2d218", "eventTime": "2019-07-22T17:10:55Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5bb5234-dc47-4829-be69-5dd4d23f45ab", "record_id": "flaws_cloudtrail:0000007:f5bb5234-dc47-4829-be69-5dd4d23f45ab", "row_index": 7, "timestamp": "2019-07-22T17:10:55Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5bb5234-dc47-4829-be69-5dd4d23f45ab", "eventTime": "2019-07-22T17:10:55Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69a78882-4616-4c1c-be57-867b778a0df7", "record_id": "flaws_cloudtrail:0000008:69a78882-4616-4c1c-be57-867b778a0df7", "row_index": 8, "timestamp": "2019-07-22T17:10:55Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69a78882-4616-4c1c-be57-867b778a0df7", "eventTime": "2019-07-22T17:10:55Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7a010c3-7bed-41dc-8563-1757e69baa85", "record_id": "flaws_cloudtrail:0000009:b7a010c3-7bed-41dc-8563-1757e69baa85", "row_index": 9, "timestamp": "2019-07-22T17:10:55Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7a010c3-7bed-41dc-8563-1757e69baa85", "eventTime": "2019-07-22T17:10:55Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5775dd9e-af12-4ae5-9ece-31e3c0214ae1", "record_id": "flaws_cloudtrail:0000010:5775dd9e-af12-4ae5-9ece-31e3c0214ae1", "row_index": 10, "timestamp": "2019-07-22T17:10:55Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5775dd9e-af12-4ae5-9ece-31e3c0214ae1", "eventTime": "2019-07-22T17:10:55Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1198f33e-5116-4b6e-9440-224ccdf78c70", "record_id": "flaws_cloudtrail:0000011:1198f33e-5116-4b6e-9440-224ccdf78c70", "row_index": 11, "timestamp": "2019-07-22T17:10:55Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1198f33e-5116-4b6e-9440-224ccdf78c70", "eventTime": "2019-07-22T17:10:55Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f392794b-e30d-4215-8208-0544cf51fadb", "record_id": "flaws_cloudtrail:0000012:f392794b-e30d-4215-8208-0544cf51fadb", "row_index": 12, "timestamp": "2019-07-22T17:10:55Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f392794b-e30d-4215-8208-0544cf51fadb", "eventTime": "2019-07-22T17:10:55Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2a3965d-fa0f-4418-8e05-e227664f81eb4", "record_id": "flaws_cloudtrail:0000013:b2a3965d-fa0f-4418-8e05-e227664f81eb4", "row_index": 13, "timestamp": "2019-07-22T17:10:55Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2a3965d-fa0f-4418-8e05-e227664f81eb4", "eventTime": "2019-07-22T17:10:55Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b03a20e4-be69-43f8-acc9-9aa703cc7d56", "record_id": "flaws_cloudtrail:0000014:b03a20e4-be69-43f8-acc9-9aa703cc7d56", "row_index": 14, "timestamp": "2019-07-22T17:10:55Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b03a20e4-be69-43f8-acc9-9aa703cc7d56", "eventTime": "2019-07-22T17:10:55Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21a208ce-f16d-49e3-af1a-bb2d35f5d089", "record_id": "flaws_cloudtrail:0000015:21a208ce-f16d-49e3-af1a-bb2d35f5d089", "row_index": 15, "timestamp": "2019-07-22T17:10:55Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21a208ce-f16d-49e3-af1a-bb2d35f5d089", "eventTime": "2019-07-22T17:10:55Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1598bdbd-ae19-483d-ad27-a7d7aa5fc42f", "record_id": "flaws_cloudtrail:0000016:1598bdbd-ae19-483d-ad27-a7d7aa5fc42f", "row_index": 16, "timestamp": "2019-07-22T17:10:55Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1598bdbd-ae19-483d-ad27-a7d7aa5fc42f", "eventTime": "2019-07-22T17:10:55Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "abd77cd7-c964-4f04-8bd5-a9f93e028326b", "record_id": "flaws_cloudtrail:0000017:abd77cd7-c964-4f04-8bd5-a9f93e028326b", "row_index": 17, "timestamp": "2019-07-22T17:10:55Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "abd77cd7-c964-4f04-8bd5-a9f93e028326b", "eventTime": "2019-07-22T17:10:55Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSnapshots", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e75f7b7-0a63-4ad4-aad9-615578c9", "record_id": "flaws_cloudtrail:0000018:7e75f7b7-0a63-4ad4-aad9-615578c9", "row_index": 18, "timestamp": "2019-07-22T17:10:55Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e75f7b7-0a63-4ad4-aad9-615578c9", "eventTime": "2019-07-22T17:10:55Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "898605d-da48-4306-8c95-f96175c6f0d8", "record_id": "flaws_cloudtrail:0000019:898605d-da48-4306-8c95-f96175c6f0d8", "row_index": 19, "timestamp": "2019-07-22T17:10:55Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "898605d-da48-4306-8c95-f96175c6f0d8", "eventTime": "2019-07-22T17:10:55Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "078c8510-8e91-48c4-9364-f90360e5713", "record_id": "flaws_cloudtrail:0000020:078c8510-8e91-48c4-9364-f90360e5713", "row_index": 20, "timestamp": "2019-07-22T17:10:55Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "078c8510-8e91-48c4-9364-f90360e5713", "eventTime": "2019-07-22T17:10:55Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99e19910-76bd-4687-be30-e2afeb0f0218", "record_id": "flaws_cloudtrail:0000021:99e19910-76bd-4687-be30-e2afeb0f0218", "row_index": 21, "timestamp": "2019-07-22T17:10:55Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99e19910-76bd-4687-be30-e2afeb0f0218", "eventTime": "2019-07-22T17:10:55Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89e4657a-f733-4245-b099-112b0ffecb8c", "record_id": "flaws_cloudtrail:0000022:89e4657a-f733-4245-b099-112b0ffecb8c", "row_index": 22, "timestamp": "2019-07-22T17:10:55Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89e4657a-f733-4245-b099-112b0ffecb8c", "eventTime": "2019-07-22T17:10:55Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "140c51c0-e0d1-45d9-897e-fa7a68c1d6fd", "record_id": "flaws_cloudtrail:0000023:140c51c0-e0d1-45d9-897e-fa7a68c1d6fd", "row_index": 23, "timestamp": "2019-07-22T17:10:55Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "140c51c0-e0d1-45d9-897e-fa7a68c1d6fd", "eventTime": "2019-07-22T17:10:55Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2bddbc7-40a3-4c9c-a1e2-3ecdcf91d764", "record_id": "flaws_cloudtrail:0000024:e2bddbc7-40a3-4c9c-a1e2-3ecdcf91d764", "row_index": 24, "timestamp": "2019-07-22T17:10:55Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2bddbc7-40a3-4c9c-a1e2-3ecdcf91d764", "eventTime": "2019-07-22T17:10:55Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91e12449-3051-4d4e-a1e2-94c691172b0e", "record_id": "flaws_cloudtrail:0000025:91e12449-3051-4d4e-a1e2-94c691172b0e", "row_index": 25, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91e12449-3051-4d4e-a1e2-94c691172b0e", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4317ea9d-536c-4bc4-8af5-10fa5b607562d", "record_id": "flaws_cloudtrail:0000026:4317ea9d-536c-4bc4-8af5-10fa5b607562d", "row_index": 26, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4317ea9d-536c-4bc4-8af5-10fa5b607562d", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3aa7b62-e907-4f97-a66c-3074bdd752da", "record_id": "flaws_cloudtrail:0000027:a3aa7b62-e907-4f97-a66c-3074bdd752da", "row_index": 27, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3aa7b62-e907-4f97-a66c-3074bdd752da", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93d95ecb-9b28-49c2-9ede-299aa9bc9085", "record_id": "flaws_cloudtrail:0000028:93d95ecb-9b28-49c2-9ede-299aa9bc9085", "row_index": 28, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93d95ecb-9b28-49c2-9ede-299aa9bc9085", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b46da0c-71f1-46b0-b863-e21a31aa1d05", "record_id": "flaws_cloudtrail:0000029:5b46da0c-71f1-46b0-b863-e21a31aa1d05", "row_index": 29, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b46da0c-71f1-46b0-b863-e21a31aa1d05", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "511993ef2-8329-44de-b0b1-39a4908b4bfb", "record_id": "flaws_cloudtrail:0000030:511993ef2-8329-44de-b0b1-39a4908b4bfb", "row_index": 30, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "511993ef2-8329-44de-b0b1-39a4908b4bfb", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "774116f-52df-474f-b043-ea5057ad7acf", "record_id": "flaws_cloudtrail:0000031:774116f-52df-474f-b043-ea5057ad7acf", "row_index": 31, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "774116f-52df-474f-b043-ea5057ad7acf", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0123ca33-35f2-4da8-9765-baab5c0ea865", "record_id": "flaws_cloudtrail:0000032:0123ca33-35f2-4da8-9765-baab5c0ea865", "row_index": 32, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0123ca33-35f2-4da8-9765-baab5c0ea865", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54f21ecc-5edc-4e64-a6c0-fb8efa7d4805", "record_id": "flaws_cloudtrail:0000033:54f21ecc-5edc-4e64-a6c0-fb8efa7d4805", "row_index": 33, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54f21ecc-5edc-4e64-a6c0-fb8efa7d4805", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e956087-3cb6-4ee1-99ad-7433501a183d", "record_id": "flaws_cloudtrail:0000034:e956087-3cb6-4ee1-99ad-7433501a183d", "row_index": 34, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e956087-3cb6-4ee1-99ad-7433501a183d", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61a820c7-6cc1-4c76-9c30-0062c398ad01", "record_id": "flaws_cloudtrail:0000035:61a820c7-6cc1-4c76-9c30-0062c398ad01", "row_index": 35, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61a820c7-6cc1-4c76-9c30-0062c398ad01", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af810a2f-e102-42a4-af24-15edf86ececb", "record_id": "flaws_cloudtrail:0000036:af810a2f-e102-42a4-af24-15edf86ececb", "row_index": 36, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af810a2f-e102-42a4-af24-15edf86ececb", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57c4cf86-d519-43ec-95a4-31fba3c1d18c", "record_id": "flaws_cloudtrail:0000037:57c4cf86-d519-43ec-95a4-31fba3c1d18c", "row_index": 37, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57c4cf86-d519-43ec-95a4-31fba3c1d18c", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d0b6b5d-cbcd-439a-8680-98aa279d7e63", "record_id": "flaws_cloudtrail:0000038:8d0b6b5d-cbcd-439a-8680-98aa279d7e63", "row_index": 38, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d0b6b5d-cbcd-439a-8680-98aa279d7e63", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d0d5b82-f2bb-4d7d-b44e-9253e3f150f8", "record_id": "flaws_cloudtrail:0000039:4d0d5b82-f2bb-4d7d-b44e-9253e3f150f8", "row_index": 39, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d0d5b82-f2bb-4d7d-b44e-9253e3f150f8", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63eb6fe0-57a4-4f5b-9645-891c05c785b9", "record_id": "flaws_cloudtrail:0000040:63eb6fe0-57a4-4f5b-9645-891c05c785b9", "row_index": 40, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63eb6fe0-57a4-4f5b-9645-891c05c785b9", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f74f45b0-6e17-4ea4-b828-b47419e9", "record_id": "flaws_cloudtrail:0000041:f74f45b0-6e17-4ea4-b828-b47419e9", "row_index": 41, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f74f45b0-6e17-4ea4-b828-b47419e9", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4265e1ed-c3cf-46cc-abb4-8c300dc43015", "record_id": "flaws_cloudtrail:0000042:4265e1ed-c3cf-46cc-abb4-8c300dc43015", "row_index": 42, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4265e1ed-c3cf-46cc-abb4-8c300dc43015", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d18c8b18-917b-4a88-a2c6-7b704c12d303", "record_id": "flaws_cloudtrail:0000043:d18c8b18-917b-4a88-a2c6-7b704c12d303", "row_index": 43, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d18c8b18-917b-4a88-a2c6-7b704c12d303", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72b67963-4d4f-43a9-bdf4-f741e07c3b67", "record_id": "flaws_cloudtrail:0000044:72b67963-4d4f-43a9-bdf4-f741e07c3b67", "row_index": 44, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72b67963-4d4f-43a9-bdf4-f741e07c3b67", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b5eecbe-d747-405c-9379-1aa80672d", "record_id": "flaws_cloudtrail:0000045:8b5eecbe-d747-405c-9379-1aa80672d", "row_index": 45, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b5eecbe-d747-405c-9379-1aa80672d", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4a285e5-f50d-4fc9-962c-6190e4ef8462", "record_id": "flaws_cloudtrail:0000046:c4a285e5-f50d-4fc9-962c-6190e4ef8462", "row_index": 46, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4a285e5-f50d-4fc9-962c-6190e4ef8462", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfb0bb20-abf7-4da8-a965-c880a4919de5", "record_id": "flaws_cloudtrail:0000047:dfb0bb20-abf7-4da8-a965-c880a4919de5", "row_index": 47, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfb0bb20-abf7-4da8-a965-c880a4919de5", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dbce0c85-6de7-4725-83d0-2cb631d96b7e", "record_id": "flaws_cloudtrail:0000048:dbce0c85-6de7-4725-83d0-2cb631d96b7e", "row_index": 48, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dbce0c85-6de7-4725-83d0-2cb631d96b7e", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dcca3801-7e0a-46fb-9396-f6a8aba961e8", "record_id": "flaws_cloudtrail:0000049:dcca3801-7e0a-46fb-9396-f6a8aba961e8", "row_index": 49, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dcca3801-7e0a-46fb-9396-f6a8aba961e8", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24b9e400-5f4e-421b-960f-b184b0bae4f3", "record_id": "flaws_cloudtrail:0000050:24b9e400-5f4e-421b-960f-b184b0bae4f3", "row_index": 50, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24b9e400-5f4e-421b-960f-b184b0bae4f3", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a73703-8e51-46cc-84ed-15a48ef24f71", "record_id": "flaws_cloudtrail:0000051:a73703-8e51-46cc-84ed-15a48ef24f71", "row_index": 51, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a73703-8e51-46cc-84ed-15a48ef24f71", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72cbd992-6fec-480b-bc5d-d4cb2a384001", "record_id": "flaws_cloudtrail:0000052:72cbd992-6fec-480b-bc5d-d4cb2a384001", "row_index": 52, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72cbd992-6fec-480b-bc5d-d4cb2a384001", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91e12449-3051-4d4e-a1e2-94c691172b0e", "record_id": "flaws_cloudtrail:0000053:91e12449-3051-4d4e-a1e2-94c691172b0e", "row_index": 53, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91e12449-3051-4d4e-a1e2-94c691172b0e", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4317ea9d-536c-4bc4-8af5-10fa5b607562d", "record_id": "flaws_cloudtrail:0000054:4317ea9d-536c-4bc4-8af5-10fa5b607562d", "row_index": 54, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4317ea9d-536c-4bc4-8af5-10fa5b607562d", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3aa7b62-e907-4f97-a66c-3074bdd752da", "record_id": "flaws_cloudtrail:0000055:a3aa7b62-e907-4f97-a66c-3074bdd752da", "row_index": 55, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3aa7b62-e907-4f97-a66c-3074bdd752da", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93d95ecb-9b28-49c2-9ede-299aa9bc9085", "record_id": "flaws_cloudtrail:0000056:93d95ecb-9b28-49c2-9ede-299aa9bc9085", "row_index": 56, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93d95ecb-9b28-49c2-9ede-299aa9bc9085", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b46da0c-71f1-46b0-b863-e21a31aa1d05", "record_id": "flaws_cloudtrail:0000057:5b46da0c-71f1-46b0-b863-e21a31aa1d05", "row_index": 57, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b46da0c-71f1-46b0-b863-e21a31aa1d05", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "511993ef2-8329-44de-b0b1-39a4908b4bfb", "record_id": "flaws_cloudtrail:0000058:511993ef2-8329-44de-b0b1-39a4908b4bfb", "row_index": 58, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "511993ef2-8329-44de-b0b1-39a4908b4bfb", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "774116f-52df-474f-b043-ea5057ad7acf", "record_id": "flaws_cloudtrail:0000059:774116f-52df-474f-b043-ea5057ad7acf", "row_index": 59, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "774116f-52df-474f-b043-ea5057ad7acf", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0123ca33-35f2-4da8-9765-baab5c0ea865", "record_id": "flaws_cloudtrail:0000060:0123ca33-35f2-4da8-9765-baab5c0ea865", "row_index": 60, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 789, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0123ca33-35f2-4da8-9765-baab5c0ea865", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54f21ecc-5edc-4e64-a6c0-fb8efa7d4805", "record_id": "flaws_cloudtrail:0000061:54f21ecc-5edc-4e64-a6c0-fb8efa7d4805", "row_index": 61, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54f21ecc-5edc-4e64-a6c0-fb8efa7d4805", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e956087-3cb6-4ee1-99ad-7433501a183d", "record_id": "flaws_cloudtrail:0000062:e956087-3cb6-4ee1-99ad-7433501a183d", "row_index": 62, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e956087-3cb6-4ee1-99ad-7433501a183d", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61a820c7-6cc1-4c76-9c30-0062c398ad01", "record_id": "flaws_cloudtrail:0000063:61a820c7-6cc1-4c76-9c30-0062c398ad01", "row_index": 63, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61a820c7-6cc1-4c76-9c30-0062c398ad01", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af810a2f-e102-42a4-af24-15edf86ececb", "record_id": "flaws_cloudtrail:0000064:af810a2f-e102-42a4-af24-15edf86ececb", "row_index": 64, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af810a2f-e102-42a4-af24-15edf86ececb", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57c4cf86-d519-43ec-95a4-31fba3c1d18c", "record_id": "flaws_cloudtrail:0000065:57c4cf86-d519-43ec-95a4-31fba3c1d18c", "row_index": 65, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57c4cf86-d519-43ec-95a4-31fba3c1d18c", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d0b6b5d-cbcd-439a-8680-98aa279d7e63", "record_id": "flaws_cloudtrail:0000066:8d0b6b5d-cbcd-439a-8680-98aa279d7e63", "row_index": 66, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d0b6b5d-cbcd-439a-8680-98aa279d7e63", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d0d5b82-f2bb-4d7d-b44e-9253e3f150f8", "record_id": "flaws_cloudtrail:0000067:4d0d5b82-f2bb-4d7d-b44e-9253e3f150f8", "row_index": 67, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d0d5b82-f2bb-4d7d-b44e-9253e3f150f8", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63eb6fe0-57a4-4f5b-9645-891c05c785b9", "record_id": "flaws_cloudtrail:0000068:63eb6fe0-57a4-4f5b-9645-891c05c785b9", "row_index": 68, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63eb6fe0-57a4-4f5b-9645-891c05c785b9", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f74f45b0-6e17-4ea4-b828-b47419e9", "record_id": "flaws_cloudtrail:0000069:f74f45b0-6e17-4ea4-b828-b47419e9", "row_index": 69, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f74f45b0-6e17-4ea4-b828-b47419e9", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4265e1ed-c3cf-46cc-abb4-8c300dc43015", "record_id": "flaws_cloudtrail:0000070:4265e1ed-c3cf-46cc-abb4-8c300dc43015", "row_index": 70, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4265e1ed-c3cf-46cc-abb4-8c300dc43015", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d18c8b18-917b-4a88-a2c6-7b704c12d303", "record_id": "flaws_cloudtrail:0000071:d18c8b18-917b-4a88-a2c6-7b704c12d303", "row_index": 71, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d18c8b18-917b-4a88-a2c6-7b704c12d303", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72b67963-4d4f-43a9-bdf4-f741e07c3b67", "record_id": "flaws_cloudtrail:0000072:72b67963-4d4f-43a9-bdf4-f741e07c3b67", "row_index": 72, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72b67963-4d4f-43a9-bdf4-f741e07c3b67", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b5eecbe-d747-405c-9379-1aa80672d", "record_id": "flaws_cloudtrail:0000073:8b5eecbe-d747-405c-9379-1aa80672d", "row_index": 73, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b5eecbe-d747-405c-9379-1aa80672d", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4a285e5-f50d-4fc9-962c-6190e4ef8462", "record_id": "flaws_cloudtrail:0000074:c4a285e5-f50d-4fc9-962c-6190e4ef8462", "row_index": 74, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4a285e5-f50d-4fc9-962c-6190e4ef8462", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfb0bb20-abf7-4da8-a965-c880a4919de5", "record_id": "flaws_cloudtrail:0000075:dfb0bb20-abf7-4da8-a965-c880a4919de5", "row_index": 75, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfb0bb20-abf7-4da8-a965-c880a4919de5", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dbce0c85-6de7-4725-83d0-2cb631d96b7e", "record_id": "flaws_cloudtrail:0000076:dbce0c85-6de7-4725-83d0-2cb631d96b7e", "row_index": 76, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dbce0c85-6de7-4725-83d0-2cb631d96b7e", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dcca3801-7e0a-46fb-9396-f6a8aba961e8", "record_id": "flaws_cloudtrail:0000077:dcca3801-7e0a-46fb-9396-f6a8aba961e8", "row_index": 77, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dcca3801-7e0a-46fb-9396-f6a8aba961e8", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24b9e400-5f4e-421b-960f-b184b0bae4f3", "record_id": "flaws_cloudtrail:0000078:24b9e400-5f4e-421b-960f-b184b0bae4f3", "row_index": 78, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24b9e400-5f4e-421b-960f-b184b0bae4f3", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a73703-8e51-46cc-84ed-15a48ef24f71", "record_id": "flaws_cloudtrail:0000079:a73703-8e51-46cc-84ed-15a48ef24f71", "row_index": 79, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a73703-8e51-46cc-84ed-15a48ef24f71", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72cbd992-6fec-480b-bc5d-d4cb2a384001", "record_id": "flaws_cloudtrail:0000080:72cbd992-6fec-480b-bc5d-d4cb2a384001", "row_index": 80, "timestamp": "2019-07-22T17:10:56Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72cbd992-6fec-480b-bc5d-d4cb2a384001", "eventTime": "2019-07-22T17:10:56Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6fcc8a15-7de5-40c3-9250-c4f1811dc498", "record_id": "flaws_cloudtrail:0000081:6fcc8a15-7de5-40c3-9250-c4f1811dc498", "row_index": 81, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6fcc8a15-7de5-40c3-9250-c4f1811dc498", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6ecfa49-2c55-4204-9fbe-0fdeb7a4a9f9", "record_id": "flaws_cloudtrail:0000082:c6ecfa49-2c55-4204-9fbe-0fdeb7a4a9f9", "row_index": 82, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6ecfa49-2c55-4204-9fbe-0fdeb7a4a9f9", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f422858-52ac-444e-9ee5-b78286a2", "record_id": "flaws_cloudtrail:0000083:f422858-52ac-444e-9ee5-b78286a2", "row_index": 83, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f422858-52ac-444e-9ee5-b78286a2", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b87baad8-351b-4aef-9e86-708a341456e3", "record_id": "flaws_cloudtrail:0000084:b87baad8-351b-4aef-9e86-708a341456e3", "row_index": 84, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b87baad8-351b-4aef-9e86-708a341456e3", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79dd62cc-31ba-46ae-b431-d378d23716", "record_id": "flaws_cloudtrail:0000085:79dd62cc-31ba-46ae-b431-d378d23716", "row_index": 85, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79dd62cc-31ba-46ae-b431-d378d23716", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ed9d01c-c153-4623-ac4d-4fb7da34b006", "record_id": "flaws_cloudtrail:0000086:1ed9d01c-c153-4623-ac4d-4fb7da34b006", "row_index": 86, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ed9d01c-c153-4623-ac4d-4fb7da34b006", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb3a8d63-0d9d-4758-8436-dff26e4976cd", "record_id": "flaws_cloudtrail:0000087:cb3a8d63-0d9d-4758-8436-dff26e4976cd", "row_index": 87, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb3a8d63-0d9d-4758-8436-dff26e4976cd", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8366b7d1-bbf4-4131-8b0e-0a9f819c6d99", "record_id": "flaws_cloudtrail:0000088:8366b7d1-bbf4-4131-8b0e-0a9f819c6d99", "row_index": 88, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8366b7d1-bbf4-4131-8b0e-0a9f819c6d99", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4f5fd39-3a61-4484-b1c6-7e0ecaa30e0b", "record_id": "flaws_cloudtrail:0000089:c4f5fd39-3a61-4484-b1c6-7e0ecaa30e0b", "row_index": 89, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4f5fd39-3a61-4484-b1c6-7e0ecaa30e0b", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a76345-ad81-4f67-97a9-52d06410b23f", "record_id": "flaws_cloudtrail:0000090:4a76345-ad81-4f67-97a9-52d06410b23f", "row_index": 90, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a76345-ad81-4f67-97a9-52d06410b23f", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d66ccea-90e9-4e73-b546-f0e260c4fa10", "record_id": "flaws_cloudtrail:0000091:1d66ccea-90e9-4e73-b546-f0e260c4fa10", "row_index": 91, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d66ccea-90e9-4e73-b546-f0e260c4fa10", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05c7cf1a-cb86-40eb-88ea-5f576725e28c", "record_id": "flaws_cloudtrail:0000092:05c7cf1a-cb86-40eb-88ea-5f576725e28c", "row_index": 92, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05c7cf1a-cb86-40eb-88ea-5f576725e28c", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e45ba7a3-c703-4472-9897-08da3b080b52", "record_id": "flaws_cloudtrail:0000093:e45ba7a3-c703-4472-9897-08da3b080b52", "row_index": 93, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e45ba7a3-c703-4472-9897-08da3b080b52", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80d63e79-736b-4d44-8f11-ababbf52446d", "record_id": "flaws_cloudtrail:0000094:80d63e79-736b-4d44-8f11-ababbf52446d", "row_index": 94, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80d63e79-736b-4d44-8f11-ababbf52446d", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "033aa50b-8e0f-4a36-9c05-1afea1badc81", "record_id": "flaws_cloudtrail:0000095:033aa50b-8e0f-4a36-9c05-1afea1badc81", "row_index": 95, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "033aa50b-8e0f-4a36-9c05-1afea1badc81", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68cb9d9d-8240-477f-b67f-d0415cc44db9", "record_id": "flaws_cloudtrail:0000096:68cb9d9d-8240-477f-b67f-d0415cc44db9", "row_index": 96, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68cb9d9d-8240-477f-b67f-d0415cc44db9", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f038c157-a0cf-4c98-b273-cc772f86952f", "record_id": "flaws_cloudtrail:0000097:f038c157-a0cf-4c98-b273-cc772f86952f", "row_index": 97, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f038c157-a0cf-4c98-b273-cc772f86952f", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0bddc6cf-dc44-4371-b105-99a2d49341", "record_id": "flaws_cloudtrail:0000098:0bddc6cf-dc44-4371-b105-99a2d49341", "row_index": 98, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0bddc6cf-dc44-4371-b105-99a2d49341", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b07d5dea-ee7a-433c-a54a-036990b43181", "record_id": "flaws_cloudtrail:0000099:b07d5dea-ee7a-433c-a54a-036990b43181", "row_index": 99, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b07d5dea-ee7a-433c-a54a-036990b43181", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d563e996-21c9-47e5-bef3-b0c3d0d5106f", "record_id": "flaws_cloudtrail:0000100:d563e996-21c9-47e5-bef3-b0c3d0d5106f", "row_index": 100, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d563e996-21c9-47e5-bef3-b0c3d0d5106f", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "710312-cbff-4b0a-a217-a4f7e20a2bfa", "record_id": "flaws_cloudtrail:0000101:710312-cbff-4b0a-a217-a4f7e20a2bfa", "row_index": 101, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "710312-cbff-4b0a-a217-a4f7e20a2bfa", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "112af4fd-aeb8-4c0a-970c-996fe69952c2", "record_id": "flaws_cloudtrail:0000102:112af4fd-aeb8-4c0a-970c-996fe69952c2", "row_index": 102, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "112af4fd-aeb8-4c0a-970c-996fe69952c2", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "760d0a31-8b67-4a81-944b-3f01aeedf7d6", "record_id": "flaws_cloudtrail:0000103:760d0a31-8b67-4a81-944b-3f01aeedf7d6", "row_index": 103, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "760d0a31-8b67-4a81-944b-3f01aeedf7d6", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8a7da61-5f7e-470a-994c-b56c5598a2ce", "record_id": "flaws_cloudtrail:0000104:c8a7da61-5f7e-470a-994c-b56c5598a2ce", "row_index": 104, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8a7da61-5f7e-470a-994c-b56c5598a2ce", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c757a9f-fd89-404e-97a5-722fec36e4ff", "record_id": "flaws_cloudtrail:0000105:0c757a9f-fd89-404e-97a5-722fec36e4ff", "row_index": 105, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c757a9f-fd89-404e-97a5-722fec36e4ff", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6b389300-cfa3-4b64-b317-832f7687aacf", "record_id": "flaws_cloudtrail:0000106:d6b389300-cfa3-4b64-b317-832f7687aacf", "row_index": 106, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6b389300-cfa3-4b64-b317-832f7687aacf", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9251a51-1546-4608-b656-6c7a1caf9a14", "record_id": "flaws_cloudtrail:0000107:a9251a51-1546-4608-b656-6c7a1caf9a14", "row_index": 107, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9251a51-1546-4608-b656-6c7a1caf9a14", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b39c6faa-f11c-4e2a-a94e-b079ed70ad1f", "record_id": "flaws_cloudtrail:0000108:b39c6faa-f11c-4e2a-a94e-b079ed70ad1f", "row_index": 108, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b39c6faa-f11c-4e2a-a94e-b079ed70ad1f", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53792a-8e61-4b3a-9e3b-7785ae3ae9f2", "record_id": "flaws_cloudtrail:0000109:53792a-8e61-4b3a-9e3b-7785ae3ae9f2", "row_index": 109, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53792a-8e61-4b3a-9e3b-7785ae3ae9f2", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4441a156-13e1-4940-b63c-4cbd87b448d5", "record_id": "flaws_cloudtrail:0000110:4441a156-13e1-4940-b63c-4cbd87b448d5", "row_index": 110, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4441a156-13e1-4940-b63c-4cbd87b448d5", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2051ab73-9493-4e4e-9fb9-deeeec81640", "record_id": "flaws_cloudtrail:0000111:2051ab73-9493-4e4e-9fb9-deeeec81640", "row_index": 111, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 795, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2051ab73-9493-4e4e-9fb9-deeeec81640", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cff62cfd-10b3-4216-8086-cc72e7ed02c8", "record_id": "flaws_cloudtrail:0000112:cff62cfd-10b3-4216-8086-cc72e7ed02c8", "row_index": 112, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cff62cfd-10b3-4216-8086-cc72e7ed02c8", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a6a8998-4778-4291-bb2e-237891fb8b6e", "record_id": "flaws_cloudtrail:0000113:1a6a8998-4778-4291-bb2e-237891fb8b6e", "row_index": 113, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a6a8998-4778-4291-bb2e-237891fb8b6e", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3517de53-72e2-47a2-bd7a-3cb556bde2b2", "record_id": "flaws_cloudtrail:0000114:3517de53-72e2-47a2-bd7a-3cb556bde2b2", "row_index": 114, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3517de53-72e2-47a2-bd7a-3cb556bde2b2", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6fcc8a15-7de5-40c3-9250-c4f1811dc498", "record_id": "flaws_cloudtrail:0000115:6fcc8a15-7de5-40c3-9250-c4f1811dc498", "row_index": 115, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6fcc8a15-7de5-40c3-9250-c4f1811dc498", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6ecfa49-2c55-4204-9fbe-0fdeb7a4a9f9", "record_id": "flaws_cloudtrail:0000116:c6ecfa49-2c55-4204-9fbe-0fdeb7a4a9f9", "row_index": 116, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6ecfa49-2c55-4204-9fbe-0fdeb7a4a9f9", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f422858-52ac-444e-9ee5-b78286a2", "record_id": "flaws_cloudtrail:0000117:f422858-52ac-444e-9ee5-b78286a2", "row_index": 117, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f422858-52ac-444e-9ee5-b78286a2", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b87baad8-351b-4aef-9e86-708a341456e3", "record_id": "flaws_cloudtrail:0000118:b87baad8-351b-4aef-9e86-708a341456e3", "row_index": 118, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b87baad8-351b-4aef-9e86-708a341456e3", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79dd62cc-31ba-46ae-b431-d378d23716", "record_id": "flaws_cloudtrail:0000119:79dd62cc-31ba-46ae-b431-d378d23716", "row_index": 119, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79dd62cc-31ba-46ae-b431-d378d23716", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ed9d01c-c153-4623-ac4d-4fb7da34b006", "record_id": "flaws_cloudtrail:0000120:1ed9d01c-c153-4623-ac4d-4fb7da34b006", "row_index": 120, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ed9d01c-c153-4623-ac4d-4fb7da34b006", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb3a8d63-0d9d-4758-8436-dff26e4976cd", "record_id": "flaws_cloudtrail:0000121:cb3a8d63-0d9d-4758-8436-dff26e4976cd", "row_index": 121, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb3a8d63-0d9d-4758-8436-dff26e4976cd", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8366b7d1-bbf4-4131-8b0e-0a9f819c6d99", "record_id": "flaws_cloudtrail:0000122:8366b7d1-bbf4-4131-8b0e-0a9f819c6d99", "row_index": 122, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8366b7d1-bbf4-4131-8b0e-0a9f819c6d99", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4f5fd39-3a61-4484-b1c6-7e0ecaa30e0b", "record_id": "flaws_cloudtrail:0000123:c4f5fd39-3a61-4484-b1c6-7e0ecaa30e0b", "row_index": 123, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4f5fd39-3a61-4484-b1c6-7e0ecaa30e0b", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a76345-ad81-4f67-97a9-52d06410b23f", "record_id": "flaws_cloudtrail:0000124:4a76345-ad81-4f67-97a9-52d06410b23f", "row_index": 124, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a76345-ad81-4f67-97a9-52d06410b23f", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d66ccea-90e9-4e73-b546-f0e260c4fa10", "record_id": "flaws_cloudtrail:0000125:1d66ccea-90e9-4e73-b546-f0e260c4fa10", "row_index": 125, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d66ccea-90e9-4e73-b546-f0e260c4fa10", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05c7cf1a-cb86-40eb-88ea-5f576725e28c", "record_id": "flaws_cloudtrail:0000126:05c7cf1a-cb86-40eb-88ea-5f576725e28c", "row_index": 126, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05c7cf1a-cb86-40eb-88ea-5f576725e28c", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e45ba7a3-c703-4472-9897-08da3b080b52", "record_id": "flaws_cloudtrail:0000127:e45ba7a3-c703-4472-9897-08da3b080b52", "row_index": 127, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e45ba7a3-c703-4472-9897-08da3b080b52", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80d63e79-736b-4d44-8f11-ababbf52446d", "record_id": "flaws_cloudtrail:0000128:80d63e79-736b-4d44-8f11-ababbf52446d", "row_index": 128, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80d63e79-736b-4d44-8f11-ababbf52446d", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "033aa50b-8e0f-4a36-9c05-1afea1badc81", "record_id": "flaws_cloudtrail:0000129:033aa50b-8e0f-4a36-9c05-1afea1badc81", "row_index": 129, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "033aa50b-8e0f-4a36-9c05-1afea1badc81", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68cb9d9d-8240-477f-b67f-d0415cc44db9", "record_id": "flaws_cloudtrail:0000130:68cb9d9d-8240-477f-b67f-d0415cc44db9", "row_index": 130, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68cb9d9d-8240-477f-b67f-d0415cc44db9", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f038c157-a0cf-4c98-b273-cc772f86952f", "record_id": "flaws_cloudtrail:0000131:f038c157-a0cf-4c98-b273-cc772f86952f", "row_index": 131, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f038c157-a0cf-4c98-b273-cc772f86952f", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0bddc6cf-dc44-4371-b105-99a2d49341", "record_id": "flaws_cloudtrail:0000132:0bddc6cf-dc44-4371-b105-99a2d49341", "row_index": 132, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0bddc6cf-dc44-4371-b105-99a2d49341", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b07d5dea-ee7a-433c-a54a-036990b43181", "record_id": "flaws_cloudtrail:0000133:b07d5dea-ee7a-433c-a54a-036990b43181", "row_index": 133, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b07d5dea-ee7a-433c-a54a-036990b43181", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d563e996-21c9-47e5-bef3-b0c3d0d5106f", "record_id": "flaws_cloudtrail:0000134:d563e996-21c9-47e5-bef3-b0c3d0d5106f", "row_index": 134, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d563e996-21c9-47e5-bef3-b0c3d0d5106f", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "710312-cbff-4b0a-a217-a4f7e20a2bfa", "record_id": "flaws_cloudtrail:0000135:710312-cbff-4b0a-a217-a4f7e20a2bfa", "row_index": 135, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "710312-cbff-4b0a-a217-a4f7e20a2bfa", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "112af4fd-aeb8-4c0a-970c-996fe69952c2", "record_id": "flaws_cloudtrail:0000136:112af4fd-aeb8-4c0a-970c-996fe69952c2", "row_index": 136, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "112af4fd-aeb8-4c0a-970c-996fe69952c2", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "760d0a31-8b67-4a81-944b-3f01aeedf7d6", "record_id": "flaws_cloudtrail:0000137:760d0a31-8b67-4a81-944b-3f01aeedf7d6", "row_index": 137, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "760d0a31-8b67-4a81-944b-3f01aeedf7d6", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8a7da61-5f7e-470a-994c-b56c5598a2ce", "record_id": "flaws_cloudtrail:0000138:c8a7da61-5f7e-470a-994c-b56c5598a2ce", "row_index": 138, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8a7da61-5f7e-470a-994c-b56c5598a2ce", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c757a9f-fd89-404e-97a5-722fec36e4ff", "record_id": "flaws_cloudtrail:0000139:0c757a9f-fd89-404e-97a5-722fec36e4ff", "row_index": 139, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c757a9f-fd89-404e-97a5-722fec36e4ff", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6b389300-cfa3-4b64-b317-832f7687aacf", "record_id": "flaws_cloudtrail:0000140:d6b389300-cfa3-4b64-b317-832f7687aacf", "row_index": 140, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6b389300-cfa3-4b64-b317-832f7687aacf", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9251a51-1546-4608-b656-6c7a1caf9a14", "record_id": "flaws_cloudtrail:0000141:a9251a51-1546-4608-b656-6c7a1caf9a14", "row_index": 141, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeConfigurationRecorderStatus", "event_source": "config.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9251a51-1546-4608-b656-6c7a1caf9a14", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeConfigurationRecorderStatus", "eventSource": "config.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: config:DescribeConfigurationRecorderStatus", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b39c6faa-f11c-4e2a-a94e-b079ed70ad1f", "record_id": "flaws_cloudtrail:0000142:b39c6faa-f11c-4e2a-a94e-b079ed70ad1f", "row_index": 142, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b39c6faa-f11c-4e2a-a94e-b079ed70ad1f", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53792a-8e61-4b3a-9e3b-7785ae3ae9f2", "record_id": "flaws_cloudtrail:0000143:53792a-8e61-4b3a-9e3b-7785ae3ae9f2", "row_index": 143, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53792a-8e61-4b3a-9e3b-7785ae3ae9f2", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4441a156-13e1-4940-b63c-4cbd87b448d5", "record_id": "flaws_cloudtrail:0000144:4441a156-13e1-4940-b63c-4cbd87b448d5", "row_index": 144, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4441a156-13e1-4940-b63c-4cbd87b448d5", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2051ab73-9493-4e4e-9fb9-deeeec81640", "record_id": "flaws_cloudtrail:0000145:2051ab73-9493-4e4e-9fb9-deeeec81640", "row_index": 145, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 795, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2051ab73-9493-4e4e-9fb9-deeeec81640", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cff62cfd-10b3-4216-8086-cc72e7ed02c8", "record_id": "flaws_cloudtrail:0000146:cff62cfd-10b3-4216-8086-cc72e7ed02c8", "row_index": 146, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cff62cfd-10b3-4216-8086-cc72e7ed02c8", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a6a8998-4778-4291-bb2e-237891fb8b6e", "record_id": "flaws_cloudtrail:0000147:1a6a8998-4778-4291-bb2e-237891fb8b6e", "row_index": 147, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a6a8998-4778-4291-bb2e-237891fb8b6e", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3517de53-72e2-47a2-bd7a-3cb556bde2b2", "record_id": "flaws_cloudtrail:0000148:3517de53-72e2-47a2-bd7a-3cb556bde2b2", "row_index": 148, "timestamp": "2019-07-22T17:10:57Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3517de53-72e2-47a2-bd7a-3cb556bde2b2", "eventTime": "2019-07-22T17:10:57Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ba549c4-740c-4369-8e20-425606edd443", "record_id": "flaws_cloudtrail:0000149:7ba549c4-740c-4369-8e20-425606edd443", "row_index": 149, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ba549c4-740c-4369-8e20-425606edd443", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64200e-a869-40c1-8805-4fe1cd12cbf3", "record_id": "flaws_cloudtrail:0000150:64200e-a869-40c1-8805-4fe1cd12cbf3", "row_index": 150, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64200e-a869-40c1-8805-4fe1cd12cbf3", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e2a8c37-b02e-4d6a-bd6a-e9a631a1f83e", "record_id": "flaws_cloudtrail:0000151:5e2a8c37-b02e-4d6a-bd6a-e9a631a1f83e", "row_index": 151, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e2a8c37-b02e-4d6a-bd6a-e9a631a1f83e", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8861a4d-5537-4769-b37a-57bab964613c", "record_id": "flaws_cloudtrail:0000152:d8861a4d-5537-4769-b37a-57bab964613c", "row_index": 152, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8861a4d-5537-4769-b37a-57bab964613c", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58175-c070-4d2e-b93f-6c03019a5227", "record_id": "flaws_cloudtrail:0000153:58175-c070-4d2e-b93f-6c03019a5227", "row_index": 153, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58175-c070-4d2e-b93f-6c03019a5227", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e2e9c19-59b3-4e7d-b2c5-f1bb3fe4615d", "record_id": "flaws_cloudtrail:0000154:6e2e9c19-59b3-4e7d-b2c5-f1bb3fe4615d", "row_index": 154, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e2e9c19-59b3-4e7d-b2c5-f1bb3fe4615d", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7acd8ec1-7f63-4d1c-929b-30bc4e9e2830", "record_id": "flaws_cloudtrail:0000155:7acd8ec1-7f63-4d1c-929b-30bc4e9e2830", "row_index": 155, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7acd8ec1-7f63-4d1c-929b-30bc4e9e2830", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "775268efb-46b6-4166-a91e-1237a028b6e6", "record_id": "flaws_cloudtrail:0000156:775268efb-46b6-4166-a91e-1237a028b6e6", "row_index": 156, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "775268efb-46b6-4166-a91e-1237a028b6e6", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70f01e21-a412-482c-a915-ae243a1191a8", "record_id": "flaws_cloudtrail:0000157:70f01e21-a412-482c-a915-ae243a1191a8", "row_index": 157, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70f01e21-a412-482c-a915-ae243a1191a8", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "648562-df3f-4d82-959e-be8085047b47", "record_id": "flaws_cloudtrail:0000158:648562-df3f-4d82-959e-be8085047b47", "row_index": 158, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "648562-df3f-4d82-959e-be8085047b47", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c145118-6e3d-40d9-aea6-1bebdd61ad07", "record_id": "flaws_cloudtrail:0000159:c145118-6e3d-40d9-aea6-1bebdd61ad07", "row_index": 159, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c145118-6e3d-40d9-aea6-1bebdd61ad07", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "905878b-fe61-4af9-8c75-f641f30590d", "record_id": "flaws_cloudtrail:0000160:905878b-fe61-4af9-8c75-f641f30590d", "row_index": 160, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 845, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "905878b-fe61-4af9-8c75-f641f30590d", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c53a7a20-df1a-4165-bb60-92993dd8", "record_id": "flaws_cloudtrail:0000161:c53a7a20-df1a-4165-bb60-92993dd8", "row_index": 161, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c53a7a20-df1a-4165-bb60-92993dd8", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "663300-f0b3-44a4-9bad-c7cca2520652", "record_id": "flaws_cloudtrail:0000162:663300-f0b3-44a4-9bad-c7cca2520652", "row_index": 162, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "663300-f0b3-44a4-9bad-c7cca2520652", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24e065fd-3d0f-4ab4-92b3-8d270fa0e92b", "record_id": "flaws_cloudtrail:0000163:24e065fd-3d0f-4ab4-92b3-8d270fa0e92b", "row_index": 163, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24e065fd-3d0f-4ab4-92b3-8d270fa0e92b", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1a6a378-1d79-416a-bc8b-92f8192b1b03", "record_id": "flaws_cloudtrail:0000164:b1a6a378-1d79-416a-bc8b-92f8192b1b03", "row_index": 164, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1a6a378-1d79-416a-bc8b-92f8192b1b03", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba9df6e8-1825-4d99-94a3-3f3de244c921", "record_id": "flaws_cloudtrail:0000165:ba9df6e8-1825-4d99-94a3-3f3de244c921", "row_index": 165, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba9df6e8-1825-4d99-94a3-3f3de244c921", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "330688d-8bdc-4509-9b76-b9c7479a00f7", "record_id": "flaws_cloudtrail:0000166:330688d-8bdc-4509-9b76-b9c7479a00f7", "row_index": 166, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 795, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "330688d-8bdc-4509-9b76-b9c7479a00f7", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42c8170a-9694-4529-9a0a-c689800a5873", "record_id": "flaws_cloudtrail:0000167:42c8170a-9694-4529-9a0a-c689800a5873", "row_index": 167, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42c8170a-9694-4529-9a0a-c689800a5873", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5009e0a-8fb9-47b4-b987-a323635", "record_id": "flaws_cloudtrail:0000168:f5009e0a-8fb9-47b4-b987-a323635", "row_index": 168, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5009e0a-8fb9-47b4-b987-a323635", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "478eaf9d-c0ad-4f1c-bd53-bfb79093fc46", "record_id": "flaws_cloudtrail:0000169:478eaf9d-c0ad-4f1c-bd53-bfb79093fc46", "row_index": 169, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "478eaf9d-c0ad-4f1c-bd53-bfb79093fc46", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6e0f325-8612-4478-a58e-f18dfecdba46", "record_id": "flaws_cloudtrail:0000170:f6e0f325-8612-4478-a58e-f18dfecdba46", "row_index": 170, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6e0f325-8612-4478-a58e-f18dfecdba46", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90b0d301-fe27-4262-81db-f86609e48ec1", "record_id": "flaws_cloudtrail:0000171:90b0d301-fe27-4262-81db-f86609e48ec1", "row_index": 171, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90b0d301-fe27-4262-81db-f86609e48ec1", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78b135481-14ee-4b60-b8d0-efd709d248e2", "record_id": "flaws_cloudtrail:0000172:78b135481-14ee-4b60-b8d0-efd709d248e2", "row_index": 172, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78b135481-14ee-4b60-b8d0-efd709d248e2", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb05da87-2507-44ba-b055-72d455dbf763", "record_id": "flaws_cloudtrail:0000173:fb05da87-2507-44ba-b055-72d455dbf763", "row_index": 173, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb05da87-2507-44ba-b055-72d455dbf763", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f81d1300-b50d-43b0-9523-154d6d0c9e29", "record_id": "flaws_cloudtrail:0000174:f81d1300-b50d-43b0-9523-154d6d0c9e29", "row_index": 174, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 846, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f81d1300-b50d-43b0-9523-154d6d0c9e29", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bdcd5d56-bd75-4c71-9dec-cf967fc10d72", "record_id": "flaws_cloudtrail:0000175:bdcd5d56-bd75-4c71-9dec-cf967fc10d72", "row_index": 175, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bdcd5d56-bd75-4c71-9dec-cf967fc10d72", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ba549c4-740c-4369-8e20-425606edd443", "record_id": "flaws_cloudtrail:0000176:7ba549c4-740c-4369-8e20-425606edd443", "row_index": 176, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ba549c4-740c-4369-8e20-425606edd443", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64200e-a869-40c1-8805-4fe1cd12cbf3", "record_id": "flaws_cloudtrail:0000177:64200e-a869-40c1-8805-4fe1cd12cbf3", "row_index": 177, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64200e-a869-40c1-8805-4fe1cd12cbf3", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e2a8c37-b02e-4d6a-bd6a-e9a631a1f83e", "record_id": "flaws_cloudtrail:0000178:5e2a8c37-b02e-4d6a-bd6a-e9a631a1f83e", "row_index": 178, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e2a8c37-b02e-4d6a-bd6a-e9a631a1f83e", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8861a4d-5537-4769-b37a-57bab964613c", "record_id": "flaws_cloudtrail:0000179:d8861a4d-5537-4769-b37a-57bab964613c", "row_index": 179, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8861a4d-5537-4769-b37a-57bab964613c", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58175-c070-4d2e-b93f-6c03019a5227", "record_id": "flaws_cloudtrail:0000180:58175-c070-4d2e-b93f-6c03019a5227", "row_index": 180, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58175-c070-4d2e-b93f-6c03019a5227", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e2e9c19-59b3-4e7d-b2c5-f1bb3fe4615d", "record_id": "flaws_cloudtrail:0000181:6e2e9c19-59b3-4e7d-b2c5-f1bb3fe4615d", "row_index": 181, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e2e9c19-59b3-4e7d-b2c5-f1bb3fe4615d", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7acd8ec1-7f63-4d1c-929b-30bc4e9e2830", "record_id": "flaws_cloudtrail:0000182:7acd8ec1-7f63-4d1c-929b-30bc4e9e2830", "row_index": 182, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7acd8ec1-7f63-4d1c-929b-30bc4e9e2830", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "775268efb-46b6-4166-a91e-1237a028b6e6", "record_id": "flaws_cloudtrail:0000183:775268efb-46b6-4166-a91e-1237a028b6e6", "row_index": 183, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "775268efb-46b6-4166-a91e-1237a028b6e6", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70f01e21-a412-482c-a915-ae243a1191a8", "record_id": "flaws_cloudtrail:0000184:70f01e21-a412-482c-a915-ae243a1191a8", "row_index": 184, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70f01e21-a412-482c-a915-ae243a1191a8", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "648562-df3f-4d82-959e-be8085047b47", "record_id": "flaws_cloudtrail:0000185:648562-df3f-4d82-959e-be8085047b47", "row_index": 185, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "648562-df3f-4d82-959e-be8085047b47", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c145118-6e3d-40d9-aea6-1bebdd61ad07", "record_id": "flaws_cloudtrail:0000186:c145118-6e3d-40d9-aea6-1bebdd61ad07", "row_index": 186, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c145118-6e3d-40d9-aea6-1bebdd61ad07", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "905878b-fe61-4af9-8c75-f641f30590d", "record_id": "flaws_cloudtrail:0000187:905878b-fe61-4af9-8c75-f641f30590d", "row_index": 187, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 845, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "905878b-fe61-4af9-8c75-f641f30590d", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c53a7a20-df1a-4165-bb60-92993dd8", "record_id": "flaws_cloudtrail:0000188:c53a7a20-df1a-4165-bb60-92993dd8", "row_index": 188, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c53a7a20-df1a-4165-bb60-92993dd8", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "663300-f0b3-44a4-9bad-c7cca2520652", "record_id": "flaws_cloudtrail:0000189:663300-f0b3-44a4-9bad-c7cca2520652", "row_index": 189, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "663300-f0b3-44a4-9bad-c7cca2520652", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24e065fd-3d0f-4ab4-92b3-8d270fa0e92b", "record_id": "flaws_cloudtrail:0000190:24e065fd-3d0f-4ab4-92b3-8d270fa0e92b", "row_index": 190, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24e065fd-3d0f-4ab4-92b3-8d270fa0e92b", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1a6a378-1d79-416a-bc8b-92f8192b1b03", "record_id": "flaws_cloudtrail:0000191:b1a6a378-1d79-416a-bc8b-92f8192b1b03", "row_index": 191, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1a6a378-1d79-416a-bc8b-92f8192b1b03", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba9df6e8-1825-4d99-94a3-3f3de244c921", "record_id": "flaws_cloudtrail:0000192:ba9df6e8-1825-4d99-94a3-3f3de244c921", "row_index": 192, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba9df6e8-1825-4d99-94a3-3f3de244c921", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "330688d-8bdc-4509-9b76-b9c7479a00f7", "record_id": "flaws_cloudtrail:0000193:330688d-8bdc-4509-9b76-b9c7479a00f7", "row_index": 193, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 795, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "330688d-8bdc-4509-9b76-b9c7479a00f7", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42c8170a-9694-4529-9a0a-c689800a5873", "record_id": "flaws_cloudtrail:0000194:42c8170a-9694-4529-9a0a-c689800a5873", "row_index": 194, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42c8170a-9694-4529-9a0a-c689800a5873", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5009e0a-8fb9-47b4-b987-a323635", "record_id": "flaws_cloudtrail:0000195:f5009e0a-8fb9-47b4-b987-a323635", "row_index": 195, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5009e0a-8fb9-47b4-b987-a323635", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "478eaf9d-c0ad-4f1c-bd53-bfb79093fc46", "record_id": "flaws_cloudtrail:0000196:478eaf9d-c0ad-4f1c-bd53-bfb79093fc46", "row_index": 196, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "478eaf9d-c0ad-4f1c-bd53-bfb79093fc46", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6e0f325-8612-4478-a58e-f18dfecdba46", "record_id": "flaws_cloudtrail:0000197:f6e0f325-8612-4478-a58e-f18dfecdba46", "row_index": 197, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6e0f325-8612-4478-a58e-f18dfecdba46", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90b0d301-fe27-4262-81db-f86609e48ec1", "record_id": "flaws_cloudtrail:0000198:90b0d301-fe27-4262-81db-f86609e48ec1", "row_index": 198, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90b0d301-fe27-4262-81db-f86609e48ec1", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78b135481-14ee-4b60-b8d0-efd709d248e2", "record_id": "flaws_cloudtrail:0000199:78b135481-14ee-4b60-b8d0-efd709d248e2", "row_index": 199, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78b135481-14ee-4b60-b8d0-efd709d248e2", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb05da87-2507-44ba-b055-72d455dbf763", "record_id": "flaws_cloudtrail:0000200:fb05da87-2507-44ba-b055-72d455dbf763", "row_index": 200, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb05da87-2507-44ba-b055-72d455dbf763", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {"items": [{"name": "vpc-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f81d1300-b50d-43b0-9523-154d6d0c9e29", "record_id": "flaws_cloudtrail:0000201:f81d1300-b50d-43b0-9523-154d6d0c9e29", "row_index": 201, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 846, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f81d1300-b50d-43b0-9523-154d6d0c9e29", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bdcd5d56-bd75-4c71-9dec-cf967fc10d72", "record_id": "flaws_cloudtrail:0000202:bdcd5d56-bd75-4c71-9dec-cf967fc10d72", "row_index": 202, "timestamp": "2019-07-22T17:10:58Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bdcd5d56-bd75-4c71-9dec-cf967fc10d72", "eventTime": "2019-07-22T17:10:58Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0eb5aa8-4fb6-4ea1-a54c-d3ade8167f5b", "record_id": "flaws_cloudtrail:0000203:b0eb5aa8-4fb6-4ea1-a54c-d3ade8167f5b", "row_index": 203, "timestamp": "2019-07-22T17:10:59Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0eb5aa8-4fb6-4ea1-a54c-d3ade8167f5b", "eventTime": "2019-07-22T17:10:59Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4fa36ef8-4b4c-4600-aca8-bfc5e94efa85", "record_id": "flaws_cloudtrail:0000204:4fa36ef8-4b4c-4600-aca8-bfc5e94efa85", "row_index": 204, "timestamp": "2019-07-22T17:10:59Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4fa36ef8-4b4c-4600-aca8-bfc5e94efa85", "eventTime": "2019-07-22T17:10:59Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56b84eb5-00c8-4109-ae75-70b507f50884", "record_id": "flaws_cloudtrail:0000205:56b84eb5-00c8-4109-ae75-70b507f50884", "row_index": 205, "timestamp": "2019-07-22T17:10:59Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56b84eb5-00c8-4109-ae75-70b507f50884", "eventTime": "2019-07-22T17:10:59Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf321255c-5c0b-4069-bb10-cdcb92dbbc37", "record_id": "flaws_cloudtrail:0000206:bf321255c-5c0b-4069-bb10-cdcb92dbbc37", "row_index": 206, "timestamp": "2019-07-22T17:10:59Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf321255c-5c0b-4069-bb10-cdcb92dbbc37", "eventTime": "2019-07-22T17:10:59Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5315c44e-4b85-47f1-af14-fb7e3bd6d45b", "record_id": "flaws_cloudtrail:0000207:5315c44e-4b85-47f1-af14-fb7e3bd6d45b", "row_index": 207, "timestamp": "2019-07-22T17:10:59Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5315c44e-4b85-47f1-af14-fb7e3bd6d45b", "eventTime": "2019-07-22T17:10:59Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ebd6de9-e520-457a-9c88-6d2e500166cd3", "record_id": "flaws_cloudtrail:0000208:6ebd6de9-e520-457a-9c88-6d2e500166cd3", "row_index": 208, "timestamp": "2019-07-22T17:10:59Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 840, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ebd6de9-e520-457a-9c88-6d2e500166cd3", "eventTime": "2019-07-22T17:10:59Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0f032fd-96b0-4265-8da0-753e045b5b74", "record_id": "flaws_cloudtrail:0000209:f0f032fd-96b0-4265-8da0-753e045b5b74", "row_index": 209, "timestamp": "2019-07-22T17:10:59Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 846, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0f032fd-96b0-4265-8da0-753e045b5b74", "eventTime": "2019-07-22T17:10:59Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a170be2-fa65-4e9e-9c6a-06d5d4fe398a", "record_id": "flaws_cloudtrail:0000210:7a170be2-fa65-4e9e-9c6a-06d5d4fe398a", "row_index": 210, "timestamp": "2019-07-22T17:10:59Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a170be2-fa65-4e9e-9c6a-06d5d4fe398a", "eventTime": "2019-07-22T17:10:59Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "daf26a39-354b-443c-a539-5d306e02c958", "record_id": "flaws_cloudtrail:0000211:daf26a39-354b-443c-a539-5d306e02c958", "row_index": 211, "timestamp": "2019-07-22T17:10:59Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 846, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "daf26a39-354b-443c-a539-5d306e02c958", "eventTime": "2019-07-22T17:10:59Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18fa5262-3117-4b04-add3-ad39462f8ddd", "record_id": "flaws_cloudtrail:0000212:18fa5262-3117-4b04-add3-ad39462f8ddd", "row_index": 212, "timestamp": "2019-07-22T17:10:59Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18fa5262-3117-4b04-add3-ad39462f8ddd", "eventTime": "2019-07-22T17:10:59Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6a101f0-9058-45d1-9461-f5cb2db040319", "record_id": "flaws_cloudtrail:0000213:e6a101f0-9058-45d1-9461-f5cb2db040319", "row_index": 213, "timestamp": "2019-07-22T17:10:59Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6a101f0-9058-45d1-9461-f5cb2db040319", "eventTime": "2019-07-22T17:10:59Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f23f135f-745f-43b1-8134-955ea2f2bf88", "record_id": "flaws_cloudtrail:0000214:f23f135f-745f-43b1-8134-955ea2f2bf88", "row_index": 214, "timestamp": "2019-07-22T17:10:59Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f23f135f-745f-43b1-8134-955ea2f2bf88", "eventTime": "2019-07-22T17:10:59Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a61b1e7c-a4be-4dd3-94e3-70f25661c96d", "record_id": "flaws_cloudtrail:0000215:a61b1e7c-a4be-4dd3-94e3-70f25661c96d", "row_index": 215, "timestamp": "2019-07-22T17:10:59Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 846, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a61b1e7c-a4be-4dd3-94e3-70f25661c96d", "eventTime": "2019-07-22T17:10:59Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0abedba3-ce47-45a8-beb7-f5486a87147a", "record_id": "flaws_cloudtrail:0000216:0abedba3-ce47-45a8-beb7-f5486a87147a", "row_index": 216, "timestamp": "2019-07-22T17:10:59Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0abedba3-ce47-45a8-beb7-f5486a87147a", "eventTime": "2019-07-22T17:10:59Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a26d5d2d-513b-46ac-8b23-638ac095769f4", "record_id": "flaws_cloudtrail:0000217:a26d5d2d-513b-46ac-8b23-638ac095769f4", "row_index": 217, "timestamp": "2019-07-22T17:10:59Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a26d5d2d-513b-46ac-8b23-638ac095769f4", "eventTime": "2019-07-22T17:10:59Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ccdd0f77-6427-42a3-b962-bb7dba6edc56", "record_id": "flaws_cloudtrail:0000218:ccdd0f77-6427-42a3-b962-bb7dba6edc56", "row_index": 218, "timestamp": "2019-07-22T17:10:59Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 846, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ccdd0f77-6427-42a3-b962-bb7dba6edc56", "eventTime": "2019-07-22T17:10:59Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0eb5aa8-4fb6-4ea1-a54c-d3ade8167f5b", "record_id": "flaws_cloudtrail:0000219:b0eb5aa8-4fb6-4ea1-a54c-d3ade8167f5b", "row_index": 219, "timestamp": "2019-07-22T17:10:59Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0eb5aa8-4fb6-4ea1-a54c-d3ade8167f5b", "eventTime": "2019-07-22T17:10:59Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4fa36ef8-4b4c-4600-aca8-bfc5e94efa85", "record_id": "flaws_cloudtrail:0000220:4fa36ef8-4b4c-4600-aca8-bfc5e94efa85", "row_index": 220, "timestamp": "2019-07-22T17:10:59Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4fa36ef8-4b4c-4600-aca8-bfc5e94efa85", "eventTime": "2019-07-22T17:10:59Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56b84eb5-00c8-4109-ae75-70b507f50884", "record_id": "flaws_cloudtrail:0000221:56b84eb5-00c8-4109-ae75-70b507f50884", "row_index": 221, "timestamp": "2019-07-22T17:10:59Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56b84eb5-00c8-4109-ae75-70b507f50884", "eventTime": "2019-07-22T17:10:59Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf321255c-5c0b-4069-bb10-cdcb92dbbc37", "record_id": "flaws_cloudtrail:0000222:bf321255c-5c0b-4069-bb10-cdcb92dbbc37", "row_index": 222, "timestamp": "2019-07-22T17:10:59Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf321255c-5c0b-4069-bb10-cdcb92dbbc37", "eventTime": "2019-07-22T17:10:59Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5315c44e-4b85-47f1-af14-fb7e3bd6d45b", "record_id": "flaws_cloudtrail:0000223:5315c44e-4b85-47f1-af14-fb7e3bd6d45b", "row_index": 223, "timestamp": "2019-07-22T17:10:59Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5315c44e-4b85-47f1-af14-fb7e3bd6d45b", "eventTime": "2019-07-22T17:10:59Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ebd6de9-e520-457a-9c88-6d2e500166cd3", "record_id": "flaws_cloudtrail:0000224:6ebd6de9-e520-457a-9c88-6d2e500166cd3", "row_index": 224, "timestamp": "2019-07-22T17:10:59Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 840, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ebd6de9-e520-457a-9c88-6d2e500166cd3", "eventTime": "2019-07-22T17:10:59Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0f032fd-96b0-4265-8da0-753e045b5b74", "record_id": "flaws_cloudtrail:0000225:f0f032fd-96b0-4265-8da0-753e045b5b74", "row_index": 225, "timestamp": "2019-07-22T17:10:59Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 846, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0f032fd-96b0-4265-8da0-753e045b5b74", "eventTime": "2019-07-22T17:10:59Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a170be2-fa65-4e9e-9c6a-06d5d4fe398a", "record_id": "flaws_cloudtrail:0000226:7a170be2-fa65-4e9e-9c6a-06d5d4fe398a", "row_index": 226, "timestamp": "2019-07-22T17:10:59Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a170be2-fa65-4e9e-9c6a-06d5d4fe398a", "eventTime": "2019-07-22T17:10:59Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "daf26a39-354b-443c-a539-5d306e02c958", "record_id": "flaws_cloudtrail:0000227:daf26a39-354b-443c-a539-5d306e02c958", "row_index": 227, "timestamp": "2019-07-22T17:10:59Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 846, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "daf26a39-354b-443c-a539-5d306e02c958", "eventTime": "2019-07-22T17:10:59Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18fa5262-3117-4b04-add3-ad39462f8ddd", "record_id": "flaws_cloudtrail:0000228:18fa5262-3117-4b04-add3-ad39462f8ddd", "row_index": 228, "timestamp": "2019-07-22T17:10:59Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18fa5262-3117-4b04-add3-ad39462f8ddd", "eventTime": "2019-07-22T17:10:59Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6a101f0-9058-45d1-9461-f5cb2db040319", "record_id": "flaws_cloudtrail:0000229:e6a101f0-9058-45d1-9461-f5cb2db040319", "row_index": 229, "timestamp": "2019-07-22T17:10:59Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6a101f0-9058-45d1-9461-f5cb2db040319", "eventTime": "2019-07-22T17:10:59Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f23f135f-745f-43b1-8134-955ea2f2bf88", "record_id": "flaws_cloudtrail:0000230:f23f135f-745f-43b1-8134-955ea2f2bf88", "row_index": 230, "timestamp": "2019-07-22T17:10:59Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f23f135f-745f-43b1-8134-955ea2f2bf88", "eventTime": "2019-07-22T17:10:59Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a61b1e7c-a4be-4dd3-94e3-70f25661c96d", "record_id": "flaws_cloudtrail:0000231:a61b1e7c-a4be-4dd3-94e3-70f25661c96d", "row_index": 231, "timestamp": "2019-07-22T17:10:59Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 846, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a61b1e7c-a4be-4dd3-94e3-70f25661c96d", "eventTime": "2019-07-22T17:10:59Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0abedba3-ce47-45a8-beb7-f5486a87147a", "record_id": "flaws_cloudtrail:0000232:0abedba3-ce47-45a8-beb7-f5486a87147a", "row_index": 232, "timestamp": "2019-07-22T17:10:59Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0abedba3-ce47-45a8-beb7-f5486a87147a", "eventTime": "2019-07-22T17:10:59Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a26d5d2d-513b-46ac-8b23-638ac095769f4", "record_id": "flaws_cloudtrail:0000233:a26d5d2d-513b-46ac-8b23-638ac095769f4", "row_index": 233, "timestamp": "2019-07-22T17:10:59Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a26d5d2d-513b-46ac-8b23-638ac095769f4", "eventTime": "2019-07-22T17:10:59Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ccdd0f77-6427-42a3-b962-bb7dba6edc56", "record_id": "flaws_cloudtrail:0000234:ccdd0f77-6427-42a3-b962-bb7dba6edc56", "row_index": 234, "timestamp": "2019-07-22T17:10:59Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 846, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ccdd0f77-6427-42a3-b962-bb7dba6edc56", "eventTime": "2019-07-22T17:10:59Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf0d235b-9dc3-4f95-a6b9-6c840d3514e6", "record_id": "flaws_cloudtrail:0000235:cf0d235b-9dc3-4f95-a6b9-6c840d3514e6", "row_index": 235, "timestamp": "2019-07-22T17:11:00Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf0d235b-9dc3-4f95-a6b9-6c840d3514e6", "eventTime": "2019-07-22T17:11:00Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b6a95ff-9b01-496b-a8d1-bfc45e71da0e", "record_id": "flaws_cloudtrail:0000236:4b6a95ff-9b01-496b-a8d1-bfc45e71da0e", "row_index": 236, "timestamp": "2019-07-22T17:11:00Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b6a95ff-9b01-496b-a8d1-bfc45e71da0e", "eventTime": "2019-07-22T17:11:00Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5bd13bc3-fce5-46aa-a2ae-b0b683b31b0f", "record_id": "flaws_cloudtrail:0000237:5bd13bc3-fce5-46aa-a2ae-b0b683b31b0f", "row_index": 237, "timestamp": "2019-07-22T17:11:00Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 840, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5bd13bc3-fce5-46aa-a2ae-b0b683b31b0f", "eventTime": "2019-07-22T17:11:00Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92589-52d0-45d0-8389-d908dbd37193", "record_id": "flaws_cloudtrail:0000238:92589-52d0-45d0-8389-d908dbd37193", "row_index": 238, "timestamp": "2019-07-22T17:11:00Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 845, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92589-52d0-45d0-8389-d908dbd37193", "eventTime": "2019-07-22T17:11:00Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9207dce-d99a-48aa-a535-5458d6f1c160", "record_id": "flaws_cloudtrail:0000239:e9207dce-d99a-48aa-a535-5458d6f1c160", "row_index": 239, "timestamp": "2019-07-22T17:11:00Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9207dce-d99a-48aa-a535-5458d6f1c160", "eventTime": "2019-07-22T17:11:00Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d89686-65fc-4abd-8279-eea6086ddf00", "record_id": "flaws_cloudtrail:0000240:0d89686-65fc-4abd-8279-eea6086ddf00", "row_index": 240, "timestamp": "2019-07-22T17:11:00Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 842, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d89686-65fc-4abd-8279-eea6086ddf00", "eventTime": "2019-07-22T17:11:00Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e8b1caa-4c66-4636-a127-4c3fe1770abe", "record_id": "flaws_cloudtrail:0000241:8e8b1caa-4c66-4636-a127-4c3fe1770abe", "row_index": 241, "timestamp": "2019-07-22T17:11:00Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 846, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e8b1caa-4c66-4636-a127-4c3fe1770abe", "eventTime": "2019-07-22T17:11:00Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4cb0a14f-2e10-42b0-b9e8-c07f4322ab9a", "record_id": "flaws_cloudtrail:0000242:4cb0a14f-2e10-42b0-b9e8-c07f4322ab9a", "row_index": 242, "timestamp": "2019-07-22T17:11:00Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4cb0a14f-2e10-42b0-b9e8-c07f4322ab9a", "eventTime": "2019-07-22T17:11:00Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b741fdd-10f5-4665-ae89-93322a0732f7", "record_id": "flaws_cloudtrail:0000243:4b741fdd-10f5-4665-ae89-93322a0732f7", "row_index": 243, "timestamp": "2019-07-22T17:11:00Z", "event_type": "DescribeInstanceAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b741fdd-10f5-4665-ae89-93322a0732f7", "eventTime": "2019-07-22T17:11:00Z", "eventName": "DescribeInstanceAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instanceId": "i-aa2d3b42e5c6e801a", "attribute": "userData"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf0d235b-9dc3-4f95-a6b9-6c840d3514e6", "record_id": "flaws_cloudtrail:0000244:cf0d235b-9dc3-4f95-a6b9-6c840d3514e6", "row_index": 244, "timestamp": "2019-07-22T17:11:00Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf0d235b-9dc3-4f95-a6b9-6c840d3514e6", "eventTime": "2019-07-22T17:11:00Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b6a95ff-9b01-496b-a8d1-bfc45e71da0e", "record_id": "flaws_cloudtrail:0000245:4b6a95ff-9b01-496b-a8d1-bfc45e71da0e", "row_index": 245, "timestamp": "2019-07-22T17:11:00Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b6a95ff-9b01-496b-a8d1-bfc45e71da0e", "eventTime": "2019-07-22T17:11:00Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5bd13bc3-fce5-46aa-a2ae-b0b683b31b0f", "record_id": "flaws_cloudtrail:0000246:5bd13bc3-fce5-46aa-a2ae-b0b683b31b0f", "row_index": 246, "timestamp": "2019-07-22T17:11:00Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 840, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5bd13bc3-fce5-46aa-a2ae-b0b683b31b0f", "eventTime": "2019-07-22T17:11:00Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92589-52d0-45d0-8389-d908dbd37193", "record_id": "flaws_cloudtrail:0000247:92589-52d0-45d0-8389-d908dbd37193", "row_index": 247, "timestamp": "2019-07-22T17:11:00Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 845, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92589-52d0-45d0-8389-d908dbd37193", "eventTime": "2019-07-22T17:11:00Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9207dce-d99a-48aa-a535-5458d6f1c160", "record_id": "flaws_cloudtrail:0000248:e9207dce-d99a-48aa-a535-5458d6f1c160", "row_index": 248, "timestamp": "2019-07-22T17:11:00Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9207dce-d99a-48aa-a535-5458d6f1c160", "eventTime": "2019-07-22T17:11:00Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d89686-65fc-4abd-8279-eea6086ddf00", "record_id": "flaws_cloudtrail:0000249:0d89686-65fc-4abd-8279-eea6086ddf00", "row_index": 249, "timestamp": "2019-07-22T17:11:00Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 842, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d89686-65fc-4abd-8279-eea6086ddf00", "eventTime": "2019-07-22T17:11:00Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e8b1caa-4c66-4636-a127-4c3fe1770abe", "record_id": "flaws_cloudtrail:0000250:8e8b1caa-4c66-4636-a127-4c3fe1770abe", "row_index": 250, "timestamp": "2019-07-22T17:11:00Z", "event_type": "DescribeCacheSubnetGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 846, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e8b1caa-4c66-4636-a127-4c3fe1770abe", "eventTime": "2019-07-22T17:11:00Z", "eventName": "DescribeCacheSubnetGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4cb0a14f-2e10-42b0-b9e8-c07f4322ab9a", "record_id": "flaws_cloudtrail:0000251:4cb0a14f-2e10-42b0-b9e8-c07f4322ab9a", "row_index": 251, "timestamp": "2019-07-22T17:11:00Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4cb0a14f-2e10-42b0-b9e8-c07f4322ab9a", "eventTime": "2019-07-22T17:11:00Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b741fdd-10f5-4665-ae89-93322a0732f7", "record_id": "flaws_cloudtrail:0000252:4b741fdd-10f5-4665-ae89-93322a0732f7", "row_index": 252, "timestamp": "2019-07-22T17:11:00Z", "event_type": "DescribeInstanceAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b741fdd-10f5-4665-ae89-93322a0732f7", "eventTime": "2019-07-22T17:11:00Z", "eventName": "DescribeInstanceAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instanceId": "i-aa2d3b42e5c6e801a", "attribute": "userData"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9c76746-c314-4cae-9186-37571294ce5d", "record_id": "flaws_cloudtrail:0000253:d9c76746-c314-4cae-9186-37571294ce5d", "row_index": 253, "timestamp": "2019-07-22T17:13:37Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAYQRAK95E38GK23NR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "139.206.42.50", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 514, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9c76746-c314-4cae-9186-37571294ce5d", "eventTime": "2019-07-22T17:13:37Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "139.206.42.50", "userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAYQRAK95E38GK23NR", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65699a8c-17c3-45c7-be15-6d9d390453c1", "record_id": "flaws_cloudtrail:0000254:65699a8c-17c3-45c7-be15-6d9d390453c1", "row_index": 254, "timestamp": "2019-07-22T17:14:28Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAYQRAK95E38GK23NR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "139.206.42.50", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 543, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65699a8c-17c3-45c7-be15-6d9d390453c1", "eventTime": "2019-07-22T17:14:28Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "139.206.42.50", "userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAYQRAK95E38GK23NR", "userName": "backup"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb42e123-a761-4e35-b680-f50bf1cf4a4c", "record_id": "flaws_cloudtrail:0000255:fb42e123-a761-4e35-b680-f50bf1cf4a4c", "row_index": 255, "timestamp": "2019-07-22T17:16:28Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAYQRAK95E38GK23NR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "139.206.42.50", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 553, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb42e123-a761-4e35-b680-f50bf1cf4a4c", "eventTime": "2019-07-22T17:16:28Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "139.206.42.50", "userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAYQRAK95E38GK23NR", "userName": "backup"}, "requestParameters": {"userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3913ce6-1889-44ac-a10f-7278855ec998", "record_id": "flaws_cloudtrail:0000256:d3913ce6-1889-44ac-a10f-7278855ec998", "row_index": 256, "timestamp": "2019-07-22T17:19:22Z", "event_type": "CreateUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAYQRAK95E38GK23NR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "139.206.42.50", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:user/backup-bot-776"], "raw_record_size_bytes": 627, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3913ce6-1889-44ac-a10f-7278855ec998", "eventTime": "2019-07-22T17:19:22Z", "eventName": "CreateUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "139.206.42.50", "userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAYQRAK95E38GK23NR", "userName": "backup"}, "requestParameters": {"userName": "backup-bot-776"}, "resources": [{"ARN": "arn:aws:iam::811596193553:user/backup-bot-776"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "150cd0f0-68fe-44d6-b917-19f4f60513ff", "record_id": "flaws_cloudtrail:0000257:150cd0f0-68fe-44d6-b917-19f4f60513ff", "row_index": 257, "timestamp": "2019-07-22T17:19:46Z", "event_type": "CreateAccessKey", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAYQRAK95E38GK23NR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "139.206.42.50", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:user/backup-bot-776"], "raw_record_size_bytes": 632, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "150cd0f0-68fe-44d6-b917-19f4f60513ff", "eventTime": "2019-07-22T17:19:46Z", "eventName": "CreateAccessKey", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "139.206.42.50", "userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAYQRAK95E38GK23NR", "userName": "backup"}, "requestParameters": {"userName": "backup-bot-776"}, "resources": [{"ARN": "arn:aws:iam::811596193553:user/backup-bot-776"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe3f4e13-3090-4196-aa03-c1cf858e524f", "record_id": "flaws_cloudtrail:0000258:fe3f4e13-3090-4196-aa03-c1cf858e524f", "row_index": 258, "timestamp": "2019-07-22T17:20:39Z", "event_type": "AttachUserPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAYQRAK95E38GK23NR", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "139.206.42.50", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "aws_region": "us-east-1"}, "resource_arns": ["arn:aws:iam::811596193553:user/backup-bot-776", "arn:aws:iam::aws:policy/AmazonS3FullAccess"], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe3f4e13-3090-4196-aa03-c1cf858e524f", "eventTime": "2019-07-22T17:20:39Z", "eventName": "AttachUserPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "139.206.42.50", "userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AWS-Console/1.0", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAYQRAK95E38GK23NR", "userName": "backup"}, "requestParameters": {"userName": "backup-bot-776", "policyArn": "arn:aws:iam::aws:policy/AmazonS3FullAccess"}, "resources": [{"ARN": "arn:aws:iam::811596193553:user/backup-bot-776"}, {"ARN": "arn:aws:iam::aws:policy/AmazonS3FullAccess"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "323e3036-28fc-4886-93d2-c3e0a4f6defd", "record_id": "flaws_cloudtrail:0000259:323e3036-28fc-4886-93d2-c3e0a4f6defd", "row_index": 259, "timestamp": "2019-07-22T17:22:45Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "323e3036-28fc-4886-93d2-c3e0a4f6defd", "eventTime": "2019-07-22T17:22:45Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be1af3b6-48b1-40a0-84f1-7a545fa0cb44", "record_id": "flaws_cloudtrail:0000260:be1af3b6-48b1-40a0-84f1-7a545fa0cb44", "row_index": 260, "timestamp": "2019-07-22T17:22:45Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be1af3b6-48b1-40a0-84f1-7a545fa0cb44", "eventTime": "2019-07-22T17:22:45Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "323e3036-28fc-4886-93d2-c3e0a4f6defd", "record_id": "flaws_cloudtrail:0000261:323e3036-28fc-4886-93d2-c3e0a4f6defd", "row_index": 261, "timestamp": "2019-07-22T17:22:45Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "323e3036-28fc-4886-93d2-c3e0a4f6defd", "eventTime": "2019-07-22T17:22:45Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be1af3b6-48b1-40a0-84f1-7a545fa0cb44", "record_id": "flaws_cloudtrail:0000262:be1af3b6-48b1-40a0-84f1-7a545fa0cb44", "row_index": 262, "timestamp": "2019-07-22T17:22:45Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be1af3b6-48b1-40a0-84f1-7a545fa0cb44", "eventTime": "2019-07-22T17:22:45Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b05982-fc46-4e35-9821-ce4fbc7d97f1", "record_id": "flaws_cloudtrail:0000263:0b05982-fc46-4e35-9821-ce4fbc7d97f1", "row_index": 263, "timestamp": "2019-07-22T17:22:46Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b05982-fc46-4e35-9821-ce4fbc7d97f1", "eventTime": "2019-07-22T17:22:46Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20dc9c12-d950-44a9-866a-752538cd11e0", "record_id": "flaws_cloudtrail:0000264:20dc9c12-d950-44a9-866a-752538cd11e0", "row_index": 264, "timestamp": "2019-07-22T17:22:46Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20dc9c12-d950-44a9-866a-752538cd11e0", "eventTime": "2019-07-22T17:22:46Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f47410-6d9c-4aaf-bd43-303ed61c0af3", "record_id": "flaws_cloudtrail:0000265:4f47410-6d9c-4aaf-bd43-303ed61c0af3", "row_index": 265, "timestamp": "2019-07-22T17:22:46Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f47410-6d9c-4aaf-bd43-303ed61c0af3", "eventTime": "2019-07-22T17:22:46Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b05982-fc46-4e35-9821-ce4fbc7d97f1", "record_id": "flaws_cloudtrail:0000266:0b05982-fc46-4e35-9821-ce4fbc7d97f1", "row_index": 266, "timestamp": "2019-07-22T17:22:46Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b05982-fc46-4e35-9821-ce4fbc7d97f1", "eventTime": "2019-07-22T17:22:46Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20dc9c12-d950-44a9-866a-752538cd11e0", "record_id": "flaws_cloudtrail:0000267:20dc9c12-d950-44a9-866a-752538cd11e0", "row_index": 267, "timestamp": "2019-07-22T17:22:46Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20dc9c12-d950-44a9-866a-752538cd11e0", "eventTime": "2019-07-22T17:22:46Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f47410-6d9c-4aaf-bd43-303ed61c0af3", "record_id": "flaws_cloudtrail:0000268:4f47410-6d9c-4aaf-bd43-303ed61c0af3", "row_index": 268, "timestamp": "2019-07-22T17:22:46Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f47410-6d9c-4aaf-bd43-303ed61c0af3", "eventTime": "2019-07-22T17:22:46Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "401d5c0b-4be9-4771-a658-a4e81ea64bdf", "record_id": "flaws_cloudtrail:0000269:401d5c0b-4be9-4771-a658-a4e81ea64bdf", "row_index": 269, "timestamp": "2019-07-22T17:22:47Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "401d5c0b-4be9-4771-a658-a4e81ea64bdf", "eventTime": "2019-07-22T17:22:47Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61b74e1b-ada4-49cc-98b2-1b2bb4dab686", "record_id": "flaws_cloudtrail:0000270:61b74e1b-ada4-49cc-98b2-1b2bb4dab686", "row_index": 270, "timestamp": "2019-07-22T17:22:47Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61b74e1b-ada4-49cc-98b2-1b2bb4dab686", "eventTime": "2019-07-22T17:22:47Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "401d5c0b-4be9-4771-a658-a4e81ea64bdf", "record_id": "flaws_cloudtrail:0000271:401d5c0b-4be9-4771-a658-a4e81ea64bdf", "row_index": 271, "timestamp": "2019-07-22T17:22:47Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "401d5c0b-4be9-4771-a658-a4e81ea64bdf", "eventTime": "2019-07-22T17:22:47Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61b74e1b-ada4-49cc-98b2-1b2bb4dab686", "record_id": "flaws_cloudtrail:0000272:61b74e1b-ada4-49cc-98b2-1b2bb4dab686", "row_index": 272, "timestamp": "2019-07-22T17:22:47Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61b74e1b-ada4-49cc-98b2-1b2bb4dab686", "eventTime": "2019-07-22T17:22:47Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bdd0ef38-496d-4582-87bb-70dd4c765c3a", "record_id": "flaws_cloudtrail:0000273:bdd0ef38-496d-4582-87bb-70dd4c765c3a", "row_index": 273, "timestamp": "2019-07-22T17:22:48Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bdd0ef38-496d-4582-87bb-70dd4c765c3a", "eventTime": "2019-07-22T17:22:48Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ea16a49-ef0a-46a5-bf40-a48662dc082", "record_id": "flaws_cloudtrail:0000274:9ea16a49-ef0a-46a5-bf40-a48662dc082", "row_index": 274, "timestamp": "2019-07-22T17:22:48Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ea16a49-ef0a-46a5-bf40-a48662dc082", "eventTime": "2019-07-22T17:22:48Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f078d59-96c5-4cd9-b585-b05fccc341ed", "record_id": "flaws_cloudtrail:0000275:9f078d59-96c5-4cd9-b585-b05fccc341ed", "row_index": 275, "timestamp": "2019-07-22T17:22:48Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f078d59-96c5-4cd9-b585-b05fccc341ed", "eventTime": "2019-07-22T17:22:48Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bdd0ef38-496d-4582-87bb-70dd4c765c3a", "record_id": "flaws_cloudtrail:0000276:bdd0ef38-496d-4582-87bb-70dd4c765c3a", "row_index": 276, "timestamp": "2019-07-22T17:22:48Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bdd0ef38-496d-4582-87bb-70dd4c765c3a", "eventTime": "2019-07-22T17:22:48Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ea16a49-ef0a-46a5-bf40-a48662dc082", "record_id": "flaws_cloudtrail:0000277:9ea16a49-ef0a-46a5-bf40-a48662dc082", "row_index": 277, "timestamp": "2019-07-22T17:22:48Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ea16a49-ef0a-46a5-bf40-a48662dc082", "eventTime": "2019-07-22T17:22:48Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f078d59-96c5-4cd9-b585-b05fccc341ed", "record_id": "flaws_cloudtrail:0000278:9f078d59-96c5-4cd9-b585-b05fccc341ed", "row_index": 278, "timestamp": "2019-07-22T17:22:48Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f078d59-96c5-4cd9-b585-b05fccc341ed", "eventTime": "2019-07-22T17:22:48Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e134125e-05fb-4641-85c2-9cee3cca5fcd", "record_id": "flaws_cloudtrail:0000279:e134125e-05fb-4641-85c2-9cee3cca5fcd", "row_index": 279, "timestamp": "2019-07-22T17:22:49Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e134125e-05fb-4641-85c2-9cee3cca5fcd", "eventTime": "2019-07-22T17:22:49Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f475144f9-e2b7-4205-b8bb-29630eda2cf1", "record_id": "flaws_cloudtrail:0000280:f475144f9-e2b7-4205-b8bb-29630eda2cf1", "row_index": 280, "timestamp": "2019-07-22T17:22:49Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f475144f9-e2b7-4205-b8bb-29630eda2cf1", "eventTime": "2019-07-22T17:22:49Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e134125e-05fb-4641-85c2-9cee3cca5fcd", "record_id": "flaws_cloudtrail:0000281:e134125e-05fb-4641-85c2-9cee3cca5fcd", "row_index": 281, "timestamp": "2019-07-22T17:22:49Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e134125e-05fb-4641-85c2-9cee3cca5fcd", "eventTime": "2019-07-22T17:22:49Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f475144f9-e2b7-4205-b8bb-29630eda2cf1", "record_id": "flaws_cloudtrail:0000282:f475144f9-e2b7-4205-b8bb-29630eda2cf1", "row_index": 282, "timestamp": "2019-07-22T17:22:49Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f475144f9-e2b7-4205-b8bb-29630eda2cf1", "eventTime": "2019-07-22T17:22:49Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dcf1bbd3-e304-4298-a505-13bce8c1fa1c", "record_id": "flaws_cloudtrail:0000283:dcf1bbd3-e304-4298-a505-13bce8c1fa1c", "row_index": 283, "timestamp": "2019-07-22T17:22:50Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dcf1bbd3-e304-4298-a505-13bce8c1fa1c", "eventTime": "2019-07-22T17:22:50Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad7777de-2369-4db3-b029-4423cd5c97a1", "record_id": "flaws_cloudtrail:0000284:ad7777de-2369-4db3-b029-4423cd5c97a1", "row_index": 284, "timestamp": "2019-07-22T17:22:50Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad7777de-2369-4db3-b029-4423cd5c97a1", "eventTime": "2019-07-22T17:22:50Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "689914-3429-4ad6-bb99-e79191ca42", "record_id": "flaws_cloudtrail:0000285:689914-3429-4ad6-bb99-e79191ca42", "row_index": 285, "timestamp": "2019-07-22T17:22:50Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "689914-3429-4ad6-bb99-e79191ca42", "eventTime": "2019-07-22T17:22:50Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dcf1bbd3-e304-4298-a505-13bce8c1fa1c", "record_id": "flaws_cloudtrail:0000286:dcf1bbd3-e304-4298-a505-13bce8c1fa1c", "row_index": 286, "timestamp": "2019-07-22T17:22:50Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dcf1bbd3-e304-4298-a505-13bce8c1fa1c", "eventTime": "2019-07-22T17:22:50Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad7777de-2369-4db3-b029-4423cd5c97a1", "record_id": "flaws_cloudtrail:0000287:ad7777de-2369-4db3-b029-4423cd5c97a1", "row_index": 287, "timestamp": "2019-07-22T17:22:50Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad7777de-2369-4db3-b029-4423cd5c97a1", "eventTime": "2019-07-22T17:22:50Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "689914-3429-4ad6-bb99-e79191ca42", "record_id": "flaws_cloudtrail:0000288:689914-3429-4ad6-bb99-e79191ca42", "row_index": 288, "timestamp": "2019-07-22T17:22:50Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "689914-3429-4ad6-bb99-e79191ca42", "eventTime": "2019-07-22T17:22:50Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15a08ba1-53ad-4aea-bae2-2b93f68c8c69", "record_id": "flaws_cloudtrail:0000289:15a08ba1-53ad-4aea-bae2-2b93f68c8c69", "row_index": 289, "timestamp": "2019-07-22T17:22:51Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15a08ba1-53ad-4aea-bae2-2b93f68c8c69", "eventTime": "2019-07-22T17:22:51Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ca045d8-ed50-4bde-92d4-3ca7bd297418", "record_id": "flaws_cloudtrail:0000290:2ca045d8-ed50-4bde-92d4-3ca7bd297418", "row_index": 290, "timestamp": "2019-07-22T17:22:51Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ca045d8-ed50-4bde-92d4-3ca7bd297418", "eventTime": "2019-07-22T17:22:51Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15a08ba1-53ad-4aea-bae2-2b93f68c8c69", "record_id": "flaws_cloudtrail:0000291:15a08ba1-53ad-4aea-bae2-2b93f68c8c69", "row_index": 291, "timestamp": "2019-07-22T17:22:51Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15a08ba1-53ad-4aea-bae2-2b93f68c8c69", "eventTime": "2019-07-22T17:22:51Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ca045d8-ed50-4bde-92d4-3ca7bd297418", "record_id": "flaws_cloudtrail:0000292:2ca045d8-ed50-4bde-92d4-3ca7bd297418", "row_index": 292, "timestamp": "2019-07-22T17:22:51Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ca045d8-ed50-4bde-92d4-3ca7bd297418", "eventTime": "2019-07-22T17:22:51Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "557b1a50-925a-4185-a0af-e5ad0bf40cc9", "record_id": "flaws_cloudtrail:0000293:557b1a50-925a-4185-a0af-e5ad0bf40cc9", "row_index": 293, "timestamp": "2019-07-22T17:22:52Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "557b1a50-925a-4185-a0af-e5ad0bf40cc9", "eventTime": "2019-07-22T17:22:52Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c843392d-92d9-43b5-a0e6-d90efc630c4d", "record_id": "flaws_cloudtrail:0000294:c843392d-92d9-43b5-a0e6-d90efc630c4d", "row_index": 294, "timestamp": "2019-07-22T17:22:52Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c843392d-92d9-43b5-a0e6-d90efc630c4d", "eventTime": "2019-07-22T17:22:52Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "557b1a50-925a-4185-a0af-e5ad0bf40cc9", "record_id": "flaws_cloudtrail:0000295:557b1a50-925a-4185-a0af-e5ad0bf40cc9", "row_index": 295, "timestamp": "2019-07-22T17:22:52Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "557b1a50-925a-4185-a0af-e5ad0bf40cc9", "eventTime": "2019-07-22T17:22:52Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c843392d-92d9-43b5-a0e6-d90efc630c4d", "record_id": "flaws_cloudtrail:0000296:c843392d-92d9-43b5-a0e6-d90efc630c4d", "row_index": 296, "timestamp": "2019-07-22T17:22:52Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c843392d-92d9-43b5-a0e6-d90efc630c4d", "eventTime": "2019-07-22T17:22:52Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4334a611-8deb-4ca7-962b-9024409b2f76", "record_id": "flaws_cloudtrail:0000297:4334a611-8deb-4ca7-962b-9024409b2f76", "row_index": 297, "timestamp": "2019-07-22T17:22:53Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4334a611-8deb-4ca7-962b-9024409b2f76", "eventTime": "2019-07-22T17:22:53Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9be76a71-5701-4562-900b-35e5a5b5ec2b", "record_id": "flaws_cloudtrail:0000298:9be76a71-5701-4562-900b-35e5a5b5ec2b", "row_index": 298, "timestamp": "2019-07-22T17:22:53Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9be76a71-5701-4562-900b-35e5a5b5ec2b", "eventTime": "2019-07-22T17:22:53Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4334a611-8deb-4ca7-962b-9024409b2f76", "record_id": "flaws_cloudtrail:0000299:4334a611-8deb-4ca7-962b-9024409b2f76", "row_index": 299, "timestamp": "2019-07-22T17:22:53Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4334a611-8deb-4ca7-962b-9024409b2f76", "eventTime": "2019-07-22T17:22:53Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9be76a71-5701-4562-900b-35e5a5b5ec2b", "record_id": "flaws_cloudtrail:0000300:9be76a71-5701-4562-900b-35e5a5b5ec2b", "row_index": 300, "timestamp": "2019-07-22T17:22:53Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9be76a71-5701-4562-900b-35e5a5b5ec2b", "eventTime": "2019-07-22T17:22:53Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef62a448-30e6-4c59-96a1-7facd6ca7a8f", "record_id": "flaws_cloudtrail:0000301:ef62a448-30e6-4c59-96a1-7facd6ca7a8f", "row_index": 301, "timestamp": "2019-07-22T17:22:54Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef62a448-30e6-4c59-96a1-7facd6ca7a8f", "eventTime": "2019-07-22T17:22:54Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76a258fc-580b-45af-acaa-b8ba27ff39aa", "record_id": "flaws_cloudtrail:0000302:76a258fc-580b-45af-acaa-b8ba27ff39aa", "row_index": 302, "timestamp": "2019-07-22T17:22:54Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76a258fc-580b-45af-acaa-b8ba27ff39aa", "eventTime": "2019-07-22T17:22:54Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef62a448-30e6-4c59-96a1-7facd6ca7a8f", "record_id": "flaws_cloudtrail:0000303:ef62a448-30e6-4c59-96a1-7facd6ca7a8f", "row_index": 303, "timestamp": "2019-07-22T17:22:54Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef62a448-30e6-4c59-96a1-7facd6ca7a8f", "eventTime": "2019-07-22T17:22:54Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76a258fc-580b-45af-acaa-b8ba27ff39aa", "record_id": "flaws_cloudtrail:0000304:76a258fc-580b-45af-acaa-b8ba27ff39aa", "row_index": 304, "timestamp": "2019-07-22T17:22:54Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76a258fc-580b-45af-acaa-b8ba27ff39aa", "eventTime": "2019-07-22T17:22:54Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fdca251-8bfc-4f97-9ad6-b42fc698f8ef", "record_id": "flaws_cloudtrail:0000305:1fdca251-8bfc-4f97-9ad6-b42fc698f8ef", "row_index": 305, "timestamp": "2019-07-22T17:22:55Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 840, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fdca251-8bfc-4f97-9ad6-b42fc698f8ef", "eventTime": "2019-07-22T17:22:55Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c029cb9-9645-44c1-8c14-d04c4da28cb6", "record_id": "flaws_cloudtrail:0000306:1c029cb9-9645-44c1-8c14-d04c4da28cb6", "row_index": 306, "timestamp": "2019-07-22T17:22:55Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 840, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c029cb9-9645-44c1-8c14-d04c4da28cb6", "eventTime": "2019-07-22T17:22:55Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetAccountPasswordPolicy on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92c1ab97-1174-4b9f-8f34-8b15a37e2b96", "record_id": "flaws_cloudtrail:0000307:92c1ab97-1174-4b9f-8f34-8b15a37e2b96", "row_index": 307, "timestamp": "2019-07-22T17:22:55Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 846, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92c1ab97-1174-4b9f-8f34-8b15a37e2b96", "eventTime": "2019-07-22T17:22:55Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListGroups on resource: arn:aws:iam::811596193553:group/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3b6af76-4891-416b-9064-744843453677", "record_id": "flaws_cloudtrail:0000308:a3b6af76-4891-416b-9064-744843453677", "row_index": 308, "timestamp": "2019-07-22T17:22:55Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3b6af76-4891-416b-9064-744843453677", "eventTime": "2019-07-22T17:22:55Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListRoles on resource: arn:aws:iam::811596193553:role/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db22d2f9-8122-4fa0-a756-a96726b89bd", "record_id": "flaws_cloudtrail:0000309:db22d2f9-8122-4fa0-a756-a96726b89bd", "row_index": 309, "timestamp": "2019-07-22T17:22:55Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db22d2f9-8122-4fa0-a756-a96726b89bd", "eventTime": "2019-07-22T17:22:55Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f29dabde-8913-42ac-afdd-11e595936d35", "record_id": "flaws_cloudtrail:0000310:f29dabde-8913-42ac-afdd-11e595936d35", "row_index": 310, "timestamp": "2019-07-22T17:22:55Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f29dabde-8913-42ac-afdd-11e595936d35", "eventTime": "2019-07-22T17:22:55Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListUsers on resource: arn:aws:iam::811596193553:user/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3106f9d7-4fe1-402a-aade-74e2e2191be6", "record_id": "flaws_cloudtrail:0000311:3106f9d7-4fe1-402a-aade-74e2e2191be6", "row_index": 311, "timestamp": "2019-07-22T17:22:55Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 831, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3106f9d7-4fe1-402a-aade-74e2e2191be6", "eventTime": "2019-07-22T17:22:55Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListPolicies on resource: policy path /", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fdca251-8bfc-4f97-9ad6-b42fc698f8ef", "record_id": "flaws_cloudtrail:0000312:1fdca251-8bfc-4f97-9ad6-b42fc698f8ef", "row_index": 312, "timestamp": "2019-07-22T17:22:55Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 840, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fdca251-8bfc-4f97-9ad6-b42fc698f8ef", "eventTime": "2019-07-22T17:22:55Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GenerateCredentialReport on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c029cb9-9645-44c1-8c14-d04c4da28cb6", "record_id": "flaws_cloudtrail:0000313:1c029cb9-9645-44c1-8c14-d04c4da28cb6", "row_index": 313, "timestamp": "2019-07-22T17:22:55Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 840, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c029cb9-9645-44c1-8c14-d04c4da28cb6", "eventTime": "2019-07-22T17:22:55Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetAccountPasswordPolicy on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92c1ab97-1174-4b9f-8f34-8b15a37e2b96", "record_id": "flaws_cloudtrail:0000314:92c1ab97-1174-4b9f-8f34-8b15a37e2b96", "row_index": 314, "timestamp": "2019-07-22T17:22:55Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 846, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92c1ab97-1174-4b9f-8f34-8b15a37e2b96", "eventTime": "2019-07-22T17:22:55Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListGroups on resource: arn:aws:iam::811596193553:group/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3b6af76-4891-416b-9064-744843453677", "record_id": "flaws_cloudtrail:0000315:a3b6af76-4891-416b-9064-744843453677", "row_index": 315, "timestamp": "2019-07-22T17:22:55Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3b6af76-4891-416b-9064-744843453677", "eventTime": "2019-07-22T17:22:55Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListRoles on resource: arn:aws:iam::811596193553:role/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db22d2f9-8122-4fa0-a756-a96726b89bd", "record_id": "flaws_cloudtrail:0000316:db22d2f9-8122-4fa0-a756-a96726b89bd", "row_index": 316, "timestamp": "2019-07-22T17:22:55Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db22d2f9-8122-4fa0-a756-a96726b89bd", "eventTime": "2019-07-22T17:22:55Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f29dabde-8913-42ac-afdd-11e595936d35", "record_id": "flaws_cloudtrail:0000317:f29dabde-8913-42ac-afdd-11e595936d35", "row_index": 317, "timestamp": "2019-07-22T17:22:55Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f29dabde-8913-42ac-afdd-11e595936d35", "eventTime": "2019-07-22T17:22:55Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListUsers on resource: arn:aws:iam::811596193553:user/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3106f9d7-4fe1-402a-aade-74e2e2191be6", "record_id": "flaws_cloudtrail:0000318:3106f9d7-4fe1-402a-aade-74e2e2191be6", "row_index": 318, "timestamp": "2019-07-22T17:22:55Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 831, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3106f9d7-4fe1-402a-aade-74e2e2191be6", "eventTime": "2019-07-22T17:22:55Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListPolicies on resource: policy path /", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "996b844a-d85a-4fe5-a8fa-bbc218d84d01", "record_id": "flaws_cloudtrail:0000319:996b844a-d85a-4fe5-a8fa-bbc218d84d01", "row_index": 319, "timestamp": "2019-07-22T17:22:56Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "996b844a-d85a-4fe5-a8fa-bbc218d84d01", "eventTime": "2019-07-22T17:22:56Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f2fec4c-6f97-4dda-9895-0a68bcc09678", "record_id": "flaws_cloudtrail:0000320:0f2fec4c-6f97-4dda-9895-0a68bcc09678", "row_index": 320, "timestamp": "2019-07-22T17:22:56Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f2fec4c-6f97-4dda-9895-0a68bcc09678", "eventTime": "2019-07-22T17:22:56Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1dd317de-b54d-4db7-bcec-4b0875225088", "record_id": "flaws_cloudtrail:0000321:1dd317de-b54d-4db7-bcec-4b0875225088", "row_index": 321, "timestamp": "2019-07-22T17:22:56Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1dd317de-b54d-4db7-bcec-4b0875225088", "eventTime": "2019-07-22T17:22:56Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "286aa0db-5e2a-46df-9e33-7db19d3a6d10", "record_id": "flaws_cloudtrail:0000322:286aa0db-5e2a-46df-9e33-7db19d3a6d10", "row_index": 322, "timestamp": "2019-07-22T17:22:56Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "286aa0db-5e2a-46df-9e33-7db19d3a6d10", "eventTime": "2019-07-22T17:22:56Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc266446-95aa-4edf-beda-8f993898016d", "record_id": "flaws_cloudtrail:0000323:fc266446-95aa-4edf-beda-8f993898016d", "row_index": 323, "timestamp": "2019-07-22T17:22:56Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc266446-95aa-4edf-beda-8f993898016d", "eventTime": "2019-07-22T17:22:56Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e95b692e-98e8-4edd-bd22-2ed34f2998cb", "record_id": "flaws_cloudtrail:0000324:e95b692e-98e8-4edd-bd22-2ed34f2998cb", "row_index": 324, "timestamp": "2019-07-22T17:22:56Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e95b692e-98e8-4edd-bd22-2ed34f2998cb", "eventTime": "2019-07-22T17:22:56Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6b1774c-e704-4e8e-9741-760076bfd6f25", "record_id": "flaws_cloudtrail:0000325:c6b1774c-e704-4e8e-9741-760076bfd6f25", "row_index": 325, "timestamp": "2019-07-22T17:22:56Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6b1774c-e704-4e8e-9741-760076bfd6f25", "eventTime": "2019-07-22T17:22:56Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "996b844a-d85a-4fe5-a8fa-bbc218d84d01", "record_id": "flaws_cloudtrail:0000326:996b844a-d85a-4fe5-a8fa-bbc218d84d01", "row_index": 326, "timestamp": "2019-07-22T17:22:56Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "996b844a-d85a-4fe5-a8fa-bbc218d84d01", "eventTime": "2019-07-22T17:22:56Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f2fec4c-6f97-4dda-9895-0a68bcc09678", "record_id": "flaws_cloudtrail:0000327:0f2fec4c-6f97-4dda-9895-0a68bcc09678", "row_index": 327, "timestamp": "2019-07-22T17:22:56Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f2fec4c-6f97-4dda-9895-0a68bcc09678", "eventTime": "2019-07-22T17:22:56Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1dd317de-b54d-4db7-bcec-4b0875225088", "record_id": "flaws_cloudtrail:0000328:1dd317de-b54d-4db7-bcec-4b0875225088", "row_index": 328, "timestamp": "2019-07-22T17:22:56Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1dd317de-b54d-4db7-bcec-4b0875225088", "eventTime": "2019-07-22T17:22:56Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "286aa0db-5e2a-46df-9e33-7db19d3a6d10", "record_id": "flaws_cloudtrail:0000329:286aa0db-5e2a-46df-9e33-7db19d3a6d10", "row_index": 329, "timestamp": "2019-07-22T17:22:56Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "286aa0db-5e2a-46df-9e33-7db19d3a6d10", "eventTime": "2019-07-22T17:22:56Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6b1774c-e704-4e8e-9741-760076bfd6f25", "record_id": "flaws_cloudtrail:0000330:c6b1774c-e704-4e8e-9741-760076bfd6f25", "row_index": 330, "timestamp": "2019-07-22T17:22:56Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6b1774c-e704-4e8e-9741-760076bfd6f25", "eventTime": "2019-07-22T17:22:56Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc266446-95aa-4edf-beda-8f993898016d", "record_id": "flaws_cloudtrail:0000331:fc266446-95aa-4edf-beda-8f993898016d", "row_index": 331, "timestamp": "2019-07-22T17:22:56Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc266446-95aa-4edf-beda-8f993898016d", "eventTime": "2019-07-22T17:22:56Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e95b692e-98e8-4edd-bd22-2ed34f2998cb", "record_id": "flaws_cloudtrail:0000332:e95b692e-98e8-4edd-bd22-2ed34f2998cb", "row_index": 332, "timestamp": "2019-07-22T17:22:56Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e95b692e-98e8-4edd-bd22-2ed34f2998cb", "eventTime": "2019-07-22T17:22:56Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8bac102-55c2-4b40-80f3-2f28b289035b8", "record_id": "flaws_cloudtrail:0000333:f8bac102-55c2-4b40-80f3-2f28b289035b8", "row_index": 333, "timestamp": "2019-07-22T17:22:57Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8bac102-55c2-4b40-80f3-2f28b289035b8", "eventTime": "2019-07-22T17:22:57Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8dff5f4e-94bf-4456-8fae-4a51d174200d", "record_id": "flaws_cloudtrail:0000334:8dff5f4e-94bf-4456-8fae-4a51d174200d", "row_index": 334, "timestamp": "2019-07-22T17:22:57Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8dff5f4e-94bf-4456-8fae-4a51d174200d", "eventTime": "2019-07-22T17:22:57Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fea68e4a-ab4c-41e0-b4d4-8000b0ef65b6", "record_id": "flaws_cloudtrail:0000335:fea68e4a-ab4c-41e0-b4d4-8000b0ef65b6", "row_index": 335, "timestamp": "2019-07-22T17:22:57Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fea68e4a-ab4c-41e0-b4d4-8000b0ef65b6", "eventTime": "2019-07-22T17:22:57Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d52dde9-eec2-4d4d-91ce-76d047556452", "record_id": "flaws_cloudtrail:0000336:9d52dde9-eec2-4d4d-91ce-76d047556452", "row_index": 336, "timestamp": "2019-07-22T17:22:57Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d52dde9-eec2-4d4d-91ce-76d047556452", "eventTime": "2019-07-22T17:22:57Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "acfaf99e-338e-43b4-bafc-79d143dac799", "record_id": "flaws_cloudtrail:0000337:acfaf99e-338e-43b4-bafc-79d143dac799", "row_index": 337, "timestamp": "2019-07-22T17:22:57Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "acfaf99e-338e-43b4-bafc-79d143dac799", "eventTime": "2019-07-22T17:22:57Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80366-5d95-4700-b07e-69028449ec50", "record_id": "flaws_cloudtrail:0000338:80366-5d95-4700-b07e-69028449ec50", "row_index": 338, "timestamp": "2019-07-22T17:22:57Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80366-5d95-4700-b07e-69028449ec50", "eventTime": "2019-07-22T17:22:57Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f87313c9-cdee-49b9-b3f4-7a664e694257", "record_id": "flaws_cloudtrail:0000339:f87313c9-cdee-49b9-b3f4-7a664e694257", "row_index": 339, "timestamp": "2019-07-22T17:22:57Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f87313c9-cdee-49b9-b3f4-7a664e694257", "eventTime": "2019-07-22T17:22:57Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c9249ca-15be-4852-b086-4df8981c1ebf", "record_id": "flaws_cloudtrail:0000340:4c9249ca-15be-4852-b086-4df8981c1ebf", "row_index": 340, "timestamp": "2019-07-22T17:22:57Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c9249ca-15be-4852-b086-4df8981c1ebf", "eventTime": "2019-07-22T17:22:57Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a44b5ea3-f683-4a22-b2a4-bee695629e89", "record_id": "flaws_cloudtrail:0000341:a44b5ea3-f683-4a22-b2a4-bee695629e89", "row_index": 341, "timestamp": "2019-07-22T17:22:57Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a44b5ea3-f683-4a22-b2a4-bee695629e89", "eventTime": "2019-07-22T17:22:57Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5a0172b-89f2-4026-8a21-ccac2101d4a7", "record_id": "flaws_cloudtrail:0000342:c5a0172b-89f2-4026-8a21-ccac2101d4a7", "row_index": 342, "timestamp": "2019-07-22T17:22:57Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5a0172b-89f2-4026-8a21-ccac2101d4a7", "eventTime": "2019-07-22T17:22:57Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48857-e042-4b6e-803c-643f2ab82bc4", "record_id": "flaws_cloudtrail:0000343:48857-e042-4b6e-803c-643f2ab82bc4", "row_index": 343, "timestamp": "2019-07-22T17:22:57Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 845, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48857-e042-4b6e-803c-643f2ab82bc4", "eventTime": "2019-07-22T17:22:57Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a333b735-2605-4a96-8412-a2753eb6ec14", "record_id": "flaws_cloudtrail:0000344:a333b735-2605-4a96-8412-a2753eb6ec14", "row_index": 344, "timestamp": "2019-07-22T17:22:57Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a333b735-2605-4a96-8412-a2753eb6ec14", "eventTime": "2019-07-22T17:22:57Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a4f9486-6278-4db3-9de1-5b97fa51acbb", "record_id": "flaws_cloudtrail:0000345:5a4f9486-6278-4db3-9de1-5b97fa51acbb", "row_index": 345, "timestamp": "2019-07-22T17:22:57Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a4f9486-6278-4db3-9de1-5b97fa51acbb", "eventTime": "2019-07-22T17:22:57Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6aa004fc-26af-49de-8a5e-b04a627657a8", "record_id": "flaws_cloudtrail:0000346:6aa004fc-26af-49de-8a5e-b04a627657a8", "row_index": 346, "timestamp": "2019-07-22T17:22:57Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 848, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6aa004fc-26af-49de-8a5e-b04a627657a8", "eventTime": "2019-07-22T17:22:57Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc602756-c7c0-476e-b2d7-c795c2ca31d9", "record_id": "flaws_cloudtrail:0000347:fc602756-c7c0-476e-b2d7-c795c2ca31d9", "row_index": 347, "timestamp": "2019-07-22T17:22:57Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc602756-c7c0-476e-b2d7-c795c2ca31d9", "eventTime": "2019-07-22T17:22:57Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33484a26-bf7b-454f-8138-b81c6f4b398e", "record_id": "flaws_cloudtrail:0000348:33484a26-bf7b-454f-8138-b81c6f4b398e", "row_index": 348, "timestamp": "2019-07-22T17:22:57Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33484a26-bf7b-454f-8138-b81c6f4b398e", "eventTime": "2019-07-22T17:22:57Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8bac102-55c2-4b40-80f3-2f28b289035b8", "record_id": "flaws_cloudtrail:0000349:f8bac102-55c2-4b40-80f3-2f28b289035b8", "row_index": 349, "timestamp": "2019-07-22T17:22:57Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8bac102-55c2-4b40-80f3-2f28b289035b8", "eventTime": "2019-07-22T17:22:57Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8dff5f4e-94bf-4456-8fae-4a51d174200d", "record_id": "flaws_cloudtrail:0000350:8dff5f4e-94bf-4456-8fae-4a51d174200d", "row_index": 350, "timestamp": "2019-07-22T17:22:57Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8dff5f4e-94bf-4456-8fae-4a51d174200d", "eventTime": "2019-07-22T17:22:57Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fea68e4a-ab4c-41e0-b4d4-8000b0ef65b6", "record_id": "flaws_cloudtrail:0000351:fea68e4a-ab4c-41e0-b4d4-8000b0ef65b6", "row_index": 351, "timestamp": "2019-07-22T17:22:57Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fea68e4a-ab4c-41e0-b4d4-8000b0ef65b6", "eventTime": "2019-07-22T17:22:57Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "acfaf99e-338e-43b4-bafc-79d143dac799", "record_id": "flaws_cloudtrail:0000352:acfaf99e-338e-43b4-bafc-79d143dac799", "row_index": 352, "timestamp": "2019-07-22T17:22:57Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "acfaf99e-338e-43b4-bafc-79d143dac799", "eventTime": "2019-07-22T17:22:57Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80366-5d95-4700-b07e-69028449ec50", "record_id": "flaws_cloudtrail:0000353:80366-5d95-4700-b07e-69028449ec50", "row_index": 353, "timestamp": "2019-07-22T17:22:57Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80366-5d95-4700-b07e-69028449ec50", "eventTime": "2019-07-22T17:22:57Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d52dde9-eec2-4d4d-91ce-76d047556452", "record_id": "flaws_cloudtrail:0000354:9d52dde9-eec2-4d4d-91ce-76d047556452", "row_index": 354, "timestamp": "2019-07-22T17:22:57Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d52dde9-eec2-4d4d-91ce-76d047556452", "eventTime": "2019-07-22T17:22:57Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f87313c9-cdee-49b9-b3f4-7a664e694257", "record_id": "flaws_cloudtrail:0000355:f87313c9-cdee-49b9-b3f4-7a664e694257", "row_index": 355, "timestamp": "2019-07-22T17:22:57Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f87313c9-cdee-49b9-b3f4-7a664e694257", "eventTime": "2019-07-22T17:22:57Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c9249ca-15be-4852-b086-4df8981c1ebf", "record_id": "flaws_cloudtrail:0000356:4c9249ca-15be-4852-b086-4df8981c1ebf", "row_index": 356, "timestamp": "2019-07-22T17:22:57Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c9249ca-15be-4852-b086-4df8981c1ebf", "eventTime": "2019-07-22T17:22:57Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a44b5ea3-f683-4a22-b2a4-bee695629e89", "record_id": "flaws_cloudtrail:0000357:a44b5ea3-f683-4a22-b2a4-bee695629e89", "row_index": 357, "timestamp": "2019-07-22T17:22:57Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a44b5ea3-f683-4a22-b2a4-bee695629e89", "eventTime": "2019-07-22T17:22:57Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5a0172b-89f2-4026-8a21-ccac2101d4a7", "record_id": "flaws_cloudtrail:0000358:c5a0172b-89f2-4026-8a21-ccac2101d4a7", "row_index": 358, "timestamp": "2019-07-22T17:22:57Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5a0172b-89f2-4026-8a21-ccac2101d4a7", "eventTime": "2019-07-22T17:22:57Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48857-e042-4b6e-803c-643f2ab82bc4", "record_id": "flaws_cloudtrail:0000359:48857-e042-4b6e-803c-643f2ab82bc4", "row_index": 359, "timestamp": "2019-07-22T17:22:57Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 845, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48857-e042-4b6e-803c-643f2ab82bc4", "eventTime": "2019-07-22T17:22:57Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a333b735-2605-4a96-8412-a2753eb6ec14", "record_id": "flaws_cloudtrail:0000360:a333b735-2605-4a96-8412-a2753eb6ec14", "row_index": 360, "timestamp": "2019-07-22T17:22:57Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a333b735-2605-4a96-8412-a2753eb6ec14", "eventTime": "2019-07-22T17:22:57Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a4f9486-6278-4db3-9de1-5b97fa51acbb", "record_id": "flaws_cloudtrail:0000361:5a4f9486-6278-4db3-9de1-5b97fa51acbb", "row_index": 361, "timestamp": "2019-07-22T17:22:57Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a4f9486-6278-4db3-9de1-5b97fa51acbb", "eventTime": "2019-07-22T17:22:57Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6aa004fc-26af-49de-8a5e-b04a627657a8", "record_id": "flaws_cloudtrail:0000362:6aa004fc-26af-49de-8a5e-b04a627657a8", "row_index": 362, "timestamp": "2019-07-22T17:22:57Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 848, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6aa004fc-26af-49de-8a5e-b04a627657a8", "eventTime": "2019-07-22T17:22:57Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc602756-c7c0-476e-b2d7-c795c2ca31d9", "record_id": "flaws_cloudtrail:0000363:fc602756-c7c0-476e-b2d7-c795c2ca31d9", "row_index": 363, "timestamp": "2019-07-22T17:22:57Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc602756-c7c0-476e-b2d7-c795c2ca31d9", "eventTime": "2019-07-22T17:22:57Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33484a26-bf7b-454f-8138-b81c6f4b398e", "record_id": "flaws_cloudtrail:0000364:33484a26-bf7b-454f-8138-b81c6f4b398e", "row_index": 364, "timestamp": "2019-07-22T17:22:57Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33484a26-bf7b-454f-8138-b81c6f4b398e", "eventTime": "2019-07-22T17:22:57Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2f63bc7-2232-4e5d-a122-aeb81e0bfe12", "record_id": "flaws_cloudtrail:0000365:c2f63bc7-2232-4e5d-a122-aeb81e0bfe12", "row_index": 365, "timestamp": "2019-07-22T17:22:58Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2f63bc7-2232-4e5d-a122-aeb81e0bfe12", "eventTime": "2019-07-22T17:22:58Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7d135071-feb4-4fff-9d5d-953eb532416e", "record_id": "flaws_cloudtrail:0000366:b7d135071-feb4-4fff-9d5d-953eb532416e", "row_index": 366, "timestamp": "2019-07-22T17:22:58Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7d135071-feb4-4fff-9d5d-953eb532416e", "eventTime": "2019-07-22T17:22:58Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f7cc1d8-c716-4cea-9493-4c9841c74c4a", "record_id": "flaws_cloudtrail:0000367:6f7cc1d8-c716-4cea-9493-4c9841c74c4a", "row_index": 367, "timestamp": "2019-07-22T17:22:58Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f7cc1d8-c716-4cea-9493-4c9841c74c4a", "eventTime": "2019-07-22T17:22:58Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f0a5d8f-c279-4605-ae4d-952dcd3c9ff9", "record_id": "flaws_cloudtrail:0000368:9f0a5d8f-c279-4605-ae4d-952dcd3c9ff9", "row_index": 368, "timestamp": "2019-07-22T17:22:58Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f0a5d8f-c279-4605-ae4d-952dcd3c9ff9", "eventTime": "2019-07-22T17:22:58Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "856dc9bf-6460-4709-8566-7d357c0b6b5e", "record_id": "flaws_cloudtrail:0000369:856dc9bf-6460-4709-8566-7d357c0b6b5e", "row_index": 369, "timestamp": "2019-07-22T17:22:58Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "856dc9bf-6460-4709-8566-7d357c0b6b5e", "eventTime": "2019-07-22T17:22:58Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95016-a40f-4f7f-b63c-4d7c630bceec", "record_id": "flaws_cloudtrail:0000370:95016-a40f-4f7f-b63c-4d7c630bceec", "row_index": 370, "timestamp": "2019-07-22T17:22:58Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 846, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95016-a40f-4f7f-b63c-4d7c630bceec", "eventTime": "2019-07-22T17:22:58Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7d5ba14-bd80-4668-b4ef-ae883f367a8f", "record_id": "flaws_cloudtrail:0000371:b7d5ba14-bd80-4668-b4ef-ae883f367a8f", "row_index": 371, "timestamp": "2019-07-22T17:22:58Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7d5ba14-bd80-4668-b4ef-ae883f367a8f", "eventTime": "2019-07-22T17:22:58Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d62526e-12a3-491f-8396-989d3e4f8649", "record_id": "flaws_cloudtrail:0000372:3d62526e-12a3-491f-8396-989d3e4f8649", "row_index": 372, "timestamp": "2019-07-22T17:22:58Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d62526e-12a3-491f-8396-989d3e4f8649", "eventTime": "2019-07-22T17:22:58Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2f63bc7-2232-4e5d-a122-aeb81e0bfe12", "record_id": "flaws_cloudtrail:0000373:c2f63bc7-2232-4e5d-a122-aeb81e0bfe12", "row_index": 373, "timestamp": "2019-07-22T17:22:58Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2f63bc7-2232-4e5d-a122-aeb81e0bfe12", "eventTime": "2019-07-22T17:22:58Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7d135071-feb4-4fff-9d5d-953eb532416e", "record_id": "flaws_cloudtrail:0000374:b7d135071-feb4-4fff-9d5d-953eb532416e", "row_index": 374, "timestamp": "2019-07-22T17:22:58Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7d135071-feb4-4fff-9d5d-953eb532416e", "eventTime": "2019-07-22T17:22:58Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "856dc9bf-6460-4709-8566-7d357c0b6b5e", "record_id": "flaws_cloudtrail:0000375:856dc9bf-6460-4709-8566-7d357c0b6b5e", "row_index": 375, "timestamp": "2019-07-22T17:22:58Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "856dc9bf-6460-4709-8566-7d357c0b6b5e", "eventTime": "2019-07-22T17:22:58Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f7cc1d8-c716-4cea-9493-4c9841c74c4a", "record_id": "flaws_cloudtrail:0000376:6f7cc1d8-c716-4cea-9493-4c9841c74c4a", "row_index": 376, "timestamp": "2019-07-22T17:22:58Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f7cc1d8-c716-4cea-9493-4c9841c74c4a", "eventTime": "2019-07-22T17:22:58Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f0a5d8f-c279-4605-ae4d-952dcd3c9ff9", "record_id": "flaws_cloudtrail:0000377:9f0a5d8f-c279-4605-ae4d-952dcd3c9ff9", "row_index": 377, "timestamp": "2019-07-22T17:22:58Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f0a5d8f-c279-4605-ae4d-952dcd3c9ff9", "eventTime": "2019-07-22T17:22:58Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95016-a40f-4f7f-b63c-4d7c630bceec", "record_id": "flaws_cloudtrail:0000378:95016-a40f-4f7f-b63c-4d7c630bceec", "row_index": 378, "timestamp": "2019-07-22T17:22:58Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 846, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95016-a40f-4f7f-b63c-4d7c630bceec", "eventTime": "2019-07-22T17:22:58Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7d5ba14-bd80-4668-b4ef-ae883f367a8f", "record_id": "flaws_cloudtrail:0000379:b7d5ba14-bd80-4668-b4ef-ae883f367a8f", "row_index": 379, "timestamp": "2019-07-22T17:22:58Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7d5ba14-bd80-4668-b4ef-ae883f367a8f", "eventTime": "2019-07-22T17:22:58Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d62526e-12a3-491f-8396-989d3e4f8649", "record_id": "flaws_cloudtrail:0000380:3d62526e-12a3-491f-8396-989d3e4f8649", "row_index": 380, "timestamp": "2019-07-22T17:22:58Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d62526e-12a3-491f-8396-989d3e4f8649", "eventTime": "2019-07-22T17:22:58Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14674-de27-4bfd-aaeb-179b83011d6a", "record_id": "flaws_cloudtrail:0000381:14674-de27-4bfd-aaeb-179b83011d6a", "row_index": 381, "timestamp": "2019-07-22T17:22:59Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14674-de27-4bfd-aaeb-179b83011d6a", "eventTime": "2019-07-22T17:22:59Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1955d0b2-5dc1-400b-9696-8d4d55b7b70c", "record_id": "flaws_cloudtrail:0000382:1955d0b2-5dc1-400b-9696-8d4d55b7b70c", "row_index": 382, "timestamp": "2019-07-22T17:22:59Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1955d0b2-5dc1-400b-9696-8d4d55b7b70c", "eventTime": "2019-07-22T17:22:59Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30b981d4-3cd6-4559-b07d-4daad19ce14a", "record_id": "flaws_cloudtrail:0000383:30b981d4-3cd6-4559-b07d-4daad19ce14a", "row_index": 383, "timestamp": "2019-07-22T17:22:59Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30b981d4-3cd6-4559-b07d-4daad19ce14a", "eventTime": "2019-07-22T17:22:59Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "399d6ea2-4865-4674-842c-a1d0f521c0b6", "record_id": "flaws_cloudtrail:0000384:399d6ea2-4865-4674-842c-a1d0f521c0b6", "row_index": 384, "timestamp": "2019-07-22T17:22:59Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "399d6ea2-4865-4674-842c-a1d0f521c0b6", "eventTime": "2019-07-22T17:22:59Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14674-de27-4bfd-aaeb-179b83011d6a", "record_id": "flaws_cloudtrail:0000385:14674-de27-4bfd-aaeb-179b83011d6a", "row_index": 385, "timestamp": "2019-07-22T17:22:59Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14674-de27-4bfd-aaeb-179b83011d6a", "eventTime": "2019-07-22T17:22:59Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1955d0b2-5dc1-400b-9696-8d4d55b7b70c", "record_id": "flaws_cloudtrail:0000386:1955d0b2-5dc1-400b-9696-8d4d55b7b70c", "row_index": 386, "timestamp": "2019-07-22T17:22:59Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1955d0b2-5dc1-400b-9696-8d4d55b7b70c", "eventTime": "2019-07-22T17:22:59Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30b981d4-3cd6-4559-b07d-4daad19ce14a", "record_id": "flaws_cloudtrail:0000387:30b981d4-3cd6-4559-b07d-4daad19ce14a", "row_index": 387, "timestamp": "2019-07-22T17:22:59Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30b981d4-3cd6-4559-b07d-4daad19ce14a", "eventTime": "2019-07-22T17:22:59Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "399d6ea2-4865-4674-842c-a1d0f521c0b6", "record_id": "flaws_cloudtrail:0000388:399d6ea2-4865-4674-842c-a1d0f521c0b6", "row_index": 388, "timestamp": "2019-07-22T17:22:59Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "399d6ea2-4865-4674-842c-a1d0f521c0b6", "eventTime": "2019-07-22T17:22:59Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e31a3a2-2967-4493-bb68-e9ac2c32e2ed", "record_id": "flaws_cloudtrail:0000389:6e31a3a2-2967-4493-bb68-e9ac2c32e2ed", "row_index": 389, "timestamp": "2019-07-22T17:23:00Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e31a3a2-2967-4493-bb68-e9ac2c32e2ed", "eventTime": "2019-07-22T17:23:00Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d72cbe8-3fbc-4b07-a364-9d62b1d6afc6", "record_id": "flaws_cloudtrail:0000390:2d72cbe8-3fbc-4b07-a364-9d62b1d6afc6", "row_index": 390, "timestamp": "2019-07-22T17:23:00Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d72cbe8-3fbc-4b07-a364-9d62b1d6afc6", "eventTime": "2019-07-22T17:23:00Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5026ba43-1899-4c85-9669-96575ed5c8e6", "record_id": "flaws_cloudtrail:0000391:5026ba43-1899-4c85-9669-96575ed5c8e6", "row_index": 391, "timestamp": "2019-07-22T17:23:00Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5026ba43-1899-4c85-9669-96575ed5c8e6", "eventTime": "2019-07-22T17:23:00Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "257533a2-e09d-4d56-b1c1-a0bd07e7d201", "record_id": "flaws_cloudtrail:0000392:257533a2-e09d-4d56-b1c1-a0bd07e7d201", "row_index": 392, "timestamp": "2019-07-22T17:23:00Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "257533a2-e09d-4d56-b1c1-a0bd07e7d201", "eventTime": "2019-07-22T17:23:00Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ea8b7a5-fa5f-43a9-838f-08bf1cc92e5f", "record_id": "flaws_cloudtrail:0000393:5ea8b7a5-fa5f-43a9-838f-08bf1cc92e5f", "row_index": 393, "timestamp": "2019-07-22T17:23:00Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ea8b7a5-fa5f-43a9-838f-08bf1cc92e5f", "eventTime": "2019-07-22T17:23:00Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa98f88e-880c-4415-a3d5-bd4786c81f66", "record_id": "flaws_cloudtrail:0000394:fa98f88e-880c-4415-a3d5-bd4786c81f66", "row_index": 394, "timestamp": "2019-07-22T17:23:00Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa98f88e-880c-4415-a3d5-bd4786c81f66", "eventTime": "2019-07-22T17:23:00Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b157b90-2fdc-4f8e-8dc7-2d0c32d9c725", "record_id": "flaws_cloudtrail:0000395:4b157b90-2fdc-4f8e-8dc7-2d0c32d9c725", "row_index": 395, "timestamp": "2019-07-22T17:23:00Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b157b90-2fdc-4f8e-8dc7-2d0c32d9c725", "eventTime": "2019-07-22T17:23:00Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c012b4f9-ba45-4b06-b2ea-9c72fc4e39eb", "record_id": "flaws_cloudtrail:0000396:c012b4f9-ba45-4b06-b2ea-9c72fc4e39eb", "row_index": 396, "timestamp": "2019-07-22T17:23:00Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c012b4f9-ba45-4b06-b2ea-9c72fc4e39eb", "eventTime": "2019-07-22T17:23:00Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5669a31-a0e5-481f-9e78-2b0a6dbb35e9", "record_id": "flaws_cloudtrail:0000397:f5669a31-a0e5-481f-9e78-2b0a6dbb35e9", "row_index": 397, "timestamp": "2019-07-22T17:23:00Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 889, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5669a31-a0e5-481f-9e78-2b0a6dbb35e9", "eventTime": "2019-07-22T17:23:00Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1cf9d42a-ed70-4239-99a9-a2b9bc38df69", "record_id": "flaws_cloudtrail:0000398:1cf9d42a-ed70-4239-99a9-a2b9bc38df69", "row_index": 398, "timestamp": "2019-07-22T17:23:00Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1cf9d42a-ed70-4239-99a9-a2b9bc38df69", "eventTime": "2019-07-22T17:23:00Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e31a3a2-2967-4493-bb68-e9ac2c32e2ed", "record_id": "flaws_cloudtrail:0000399:6e31a3a2-2967-4493-bb68-e9ac2c32e2ed", "row_index": 399, "timestamp": "2019-07-22T17:23:00Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e31a3a2-2967-4493-bb68-e9ac2c32e2ed", "eventTime": "2019-07-22T17:23:00Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d72cbe8-3fbc-4b07-a364-9d62b1d6afc6", "record_id": "flaws_cloudtrail:0000400:2d72cbe8-3fbc-4b07-a364-9d62b1d6afc6", "row_index": 400, "timestamp": "2019-07-22T17:23:00Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d72cbe8-3fbc-4b07-a364-9d62b1d6afc6", "eventTime": "2019-07-22T17:23:00Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5026ba43-1899-4c85-9669-96575ed5c8e6", "record_id": "flaws_cloudtrail:0000401:5026ba43-1899-4c85-9669-96575ed5c8e6", "row_index": 401, "timestamp": "2019-07-22T17:23:00Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5026ba43-1899-4c85-9669-96575ed5c8e6", "eventTime": "2019-07-22T17:23:00Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "257533a2-e09d-4d56-b1c1-a0bd07e7d201", "record_id": "flaws_cloudtrail:0000402:257533a2-e09d-4d56-b1c1-a0bd07e7d201", "row_index": 402, "timestamp": "2019-07-22T17:23:00Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "257533a2-e09d-4d56-b1c1-a0bd07e7d201", "eventTime": "2019-07-22T17:23:00Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ea8b7a5-fa5f-43a9-838f-08bf1cc92e5f", "record_id": "flaws_cloudtrail:0000403:5ea8b7a5-fa5f-43a9-838f-08bf1cc92e5f", "row_index": 403, "timestamp": "2019-07-22T17:23:00Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ea8b7a5-fa5f-43a9-838f-08bf1cc92e5f", "eventTime": "2019-07-22T17:23:00Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa98f88e-880c-4415-a3d5-bd4786c81f66", "record_id": "flaws_cloudtrail:0000404:fa98f88e-880c-4415-a3d5-bd4786c81f66", "row_index": 404, "timestamp": "2019-07-22T17:23:00Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa98f88e-880c-4415-a3d5-bd4786c81f66", "eventTime": "2019-07-22T17:23:00Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b157b90-2fdc-4f8e-8dc7-2d0c32d9c725", "record_id": "flaws_cloudtrail:0000405:4b157b90-2fdc-4f8e-8dc7-2d0c32d9c725", "row_index": 405, "timestamp": "2019-07-22T17:23:00Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b157b90-2fdc-4f8e-8dc7-2d0c32d9c725", "eventTime": "2019-07-22T17:23:00Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c012b4f9-ba45-4b06-b2ea-9c72fc4e39eb", "record_id": "flaws_cloudtrail:0000406:c012b4f9-ba45-4b06-b2ea-9c72fc4e39eb", "row_index": 406, "timestamp": "2019-07-22T17:23:00Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c012b4f9-ba45-4b06-b2ea-9c72fc4e39eb", "eventTime": "2019-07-22T17:23:00Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5669a31-a0e5-481f-9e78-2b0a6dbb35e9", "record_id": "flaws_cloudtrail:0000407:f5669a31-a0e5-481f-9e78-2b0a6dbb35e9", "row_index": 407, "timestamp": "2019-07-22T17:23:00Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 889, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5669a31-a0e5-481f-9e78-2b0a6dbb35e9", "eventTime": "2019-07-22T17:23:00Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1cf9d42a-ed70-4239-99a9-a2b9bc38df69", "record_id": "flaws_cloudtrail:0000408:1cf9d42a-ed70-4239-99a9-a2b9bc38df69", "row_index": 408, "timestamp": "2019-07-22T17:23:00Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1cf9d42a-ed70-4239-99a9-a2b9bc38df69", "eventTime": "2019-07-22T17:23:00Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5103c22b-604e-41fe-963c-199ce9ebb4f3", "record_id": "flaws_cloudtrail:0000409:5103c22b-604e-41fe-963c-199ce9ebb4f3", "row_index": 409, "timestamp": "2019-07-22T17:23:01Z", "event_type": "ListIdentities", "event_source": "ses.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5103c22b-604e-41fe-963c-199ce9ebb4f3", "eventTime": "2019-07-22T17:23:01Z", "eventName": "ListIdentities", "eventSource": "ses.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: ses:ListIdentities", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "394450d66-eb99-4bcd-9c45-c68b059b8d0a", "record_id": "flaws_cloudtrail:0000410:394450d66-eb99-4bcd-9c45-c68b059b8d0a", "row_index": 410, "timestamp": "2019-07-22T17:23:01Z", "event_type": "ListIdentities", "event_source": "ses.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "394450d66-eb99-4bcd-9c45-c68b059b8d0a", "eventTime": "2019-07-22T17:23:01Z", "eventName": "ListIdentities", "eventSource": "ses.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: ses:ListIdentities", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "427ca40b-946d-4d65-88c0-ff97ea8e8842", "record_id": "flaws_cloudtrail:0000411:427ca40b-946d-4d65-88c0-ff97ea8e8842", "row_index": 411, "timestamp": "2019-07-22T17:23:01Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 922, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "427ca40b-946d-4d65-88c0-ff97ea8e8842", "eventTime": "2019-07-22T17:23:01Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:eu-west-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "250987e-abf4-4bc3-ba74-72d85998fac", "record_id": "flaws_cloudtrail:0000412:250987e-abf4-4bc3-ba74-72d85998fac", "row_index": 412, "timestamp": "2019-07-22T17:23:01Z", "event_type": "ListIdentities", "event_source": "ses.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "250987e-abf4-4bc3-ba74-72d85998fac", "eventTime": "2019-07-22T17:23:01Z", "eventName": "ListIdentities", "eventSource": "ses.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: ses:ListIdentities", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "070dba4e-e155-4365-8f70-6dc7cff16fb5", "record_id": "flaws_cloudtrail:0000413:070dba4e-e155-4365-8f70-6dc7cff16fb5", "row_index": 413, "timestamp": "2019-07-22T17:23:01Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 922, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "070dba4e-e155-4365-8f70-6dc7cff16fb5", "eventTime": "2019-07-22T17:23:01Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:eu-west-2:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c34d9c2f-50c6-4ea7-9334-16deb29bb990", "record_id": "flaws_cloudtrail:0000414:c34d9c2f-50c6-4ea7-9334-16deb29bb990", "row_index": 414, "timestamp": "2019-07-22T17:23:01Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 922, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c34d9c2f-50c6-4ea7-9334-16deb29bb990", "eventTime": "2019-07-22T17:23:01Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:eu-west-3:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85f88c9f-118e-41d7-9120-60375b043f15", "record_id": "flaws_cloudtrail:0000415:85f88c9f-118e-41d7-9120-60375b043f15", "row_index": 415, "timestamp": "2019-07-22T17:23:01Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85f88c9f-118e-41d7-9120-60375b043f15", "eventTime": "2019-07-22T17:23:01Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5155cc69-15d0-4a81-b60f-64d5523cec7c", "record_id": "flaws_cloudtrail:0000416:5155cc69-15d0-4a81-b60f-64d5523cec7c", "row_index": 416, "timestamp": "2019-07-22T17:23:01Z", "event_type": "ListIdentities", "event_source": "ses.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5155cc69-15d0-4a81-b60f-64d5523cec7c", "eventTime": "2019-07-22T17:23:01Z", "eventName": "ListIdentities", "eventSource": "ses.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: ses:ListIdentities", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "093f04c4-0efb-487e-804b-2cf181f8f5f6", "record_id": "flaws_cloudtrail:0000417:093f04c4-0efb-487e-804b-2cf181f8f5f6", "row_index": 417, "timestamp": "2019-07-22T17:23:01Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "093f04c4-0efb-487e-804b-2cf181f8f5f6", "eventTime": "2019-07-22T17:23:01Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da8020a7-aa4f-4893-9f9b-065de17724a9", "record_id": "flaws_cloudtrail:0000418:da8020a7-aa4f-4893-9f9b-065de17724a9", "row_index": 418, "timestamp": "2019-07-22T17:23:01Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da8020a7-aa4f-4893-9f9b-065de17724a9", "eventTime": "2019-07-22T17:23:01Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ebf01be-62ca-4eaa-9daf-8be530449c35", "record_id": "flaws_cloudtrail:0000419:8ebf01be-62ca-4eaa-9daf-8be530449c35", "row_index": 419, "timestamp": "2019-07-22T17:23:01Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ebf01be-62ca-4eaa-9daf-8be530449c35", "eventTime": "2019-07-22T17:23:01Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70abcc5c-e650-48f5-986c-a07ab3d9a86e", "record_id": "flaws_cloudtrail:0000420:70abcc5c-e650-48f5-986c-a07ab3d9a86e", "row_index": 420, "timestamp": "2019-07-22T17:23:01Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 869, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70abcc5c-e650-48f5-986c-a07ab3d9a86e", "eventTime": "2019-07-22T17:23:01Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d17e13ad-c448-451e-baa9-5f08d3a3817e", "record_id": "flaws_cloudtrail:0000421:d17e13ad-c448-451e-baa9-5f08d3a3817e", "row_index": 421, "timestamp": "2019-07-22T17:23:01Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d17e13ad-c448-451e-baa9-5f08d3a3817e", "eventTime": "2019-07-22T17:23:01Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13ac7567-66a8-4bfb-9efe-1a3792bb6f6d", "record_id": "flaws_cloudtrail:0000422:13ac7567-66a8-4bfb-9efe-1a3792bb6f6d", "row_index": 422, "timestamp": "2019-07-22T17:23:01Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13ac7567-66a8-4bfb-9efe-1a3792bb6f6d", "eventTime": "2019-07-22T17:23:01Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ba2a0ae-9813-40c3-aa0b-25d863029166", "record_id": "flaws_cloudtrail:0000423:0ba2a0ae-9813-40c3-aa0b-25d863029166", "row_index": 423, "timestamp": "2019-07-22T17:23:01Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ba2a0ae-9813-40c3-aa0b-25d863029166", "eventTime": "2019-07-22T17:23:01Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e508f4fe-ba90-4c1b-8ae9-983f88cd6c2b", "record_id": "flaws_cloudtrail:0000424:e508f4fe-ba90-4c1b-8ae9-983f88cd6c2b", "row_index": 424, "timestamp": "2019-07-22T17:23:01Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e508f4fe-ba90-4c1b-8ae9-983f88cd6c2b", "eventTime": "2019-07-22T17:23:01Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab63307-6ad0-455f-910a-7cd5f5770554", "record_id": "flaws_cloudtrail:0000425:ab63307-6ad0-455f-910a-7cd5f5770554", "row_index": 425, "timestamp": "2019-07-22T17:23:01Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab63307-6ad0-455f-910a-7cd5f5770554", "eventTime": "2019-07-22T17:23:01Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58fec890-b854-481b-99ee-adcd19ce50d4", "record_id": "flaws_cloudtrail:0000426:58fec890-b854-481b-99ee-adcd19ce50d4", "row_index": 426, "timestamp": "2019-07-22T17:23:01Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 922, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58fec890-b854-481b-99ee-adcd19ce50d4", "eventTime": "2019-07-22T17:23:01Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:us-east-2:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae902ca6-42c7-4f1b-a1c5-ce96440a94", "record_id": "flaws_cloudtrail:0000427:ae902ca6-42c7-4f1b-a1c5-ce96440a94", "row_index": 427, "timestamp": "2019-07-22T17:23:01Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae902ca6-42c7-4f1b-a1c5-ce96440a94", "eventTime": "2019-07-22T17:23:01Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09d80d96-7bab-422a-8c78-0bc185c3ce2e", "record_id": "flaws_cloudtrail:0000428:09d80d96-7bab-422a-8c78-0bc185c3ce2e", "row_index": 428, "timestamp": "2019-07-22T17:23:01Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09d80d96-7bab-422a-8c78-0bc185c3ce2e", "eventTime": "2019-07-22T17:23:01Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "064669f30-afe3-420d-97bf-c3c3f71bf33d", "record_id": "flaws_cloudtrail:0000429:064669f30-afe3-420d-97bf-c3c3f71bf33d", "row_index": 429, "timestamp": "2019-07-22T17:23:01Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "064669f30-afe3-420d-97bf-c3c3f71bf33d", "eventTime": "2019-07-22T17:23:01Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5103c22b-604e-41fe-963c-199ce9ebb4f3", "record_id": "flaws_cloudtrail:0000430:5103c22b-604e-41fe-963c-199ce9ebb4f3", "row_index": 430, "timestamp": "2019-07-22T17:23:01Z", "event_type": "ListIdentities", "event_source": "ses.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5103c22b-604e-41fe-963c-199ce9ebb4f3", "eventTime": "2019-07-22T17:23:01Z", "eventName": "ListIdentities", "eventSource": "ses.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: ses:ListIdentities", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "394450d66-eb99-4bcd-9c45-c68b059b8d0a", "record_id": "flaws_cloudtrail:0000431:394450d66-eb99-4bcd-9c45-c68b059b8d0a", "row_index": 431, "timestamp": "2019-07-22T17:23:01Z", "event_type": "ListIdentities", "event_source": "ses.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "394450d66-eb99-4bcd-9c45-c68b059b8d0a", "eventTime": "2019-07-22T17:23:01Z", "eventName": "ListIdentities", "eventSource": "ses.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: ses:ListIdentities", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "250987e-abf4-4bc3-ba74-72d85998fac", "record_id": "flaws_cloudtrail:0000432:250987e-abf4-4bc3-ba74-72d85998fac", "row_index": 432, "timestamp": "2019-07-22T17:23:01Z", "event_type": "ListIdentities", "event_source": "ses.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "250987e-abf4-4bc3-ba74-72d85998fac", "eventTime": "2019-07-22T17:23:01Z", "eventName": "ListIdentities", "eventSource": "ses.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: ses:ListIdentities", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "427ca40b-946d-4d65-88c0-ff97ea8e8842", "record_id": "flaws_cloudtrail:0000433:427ca40b-946d-4d65-88c0-ff97ea8e8842", "row_index": 433, "timestamp": "2019-07-22T17:23:01Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 922, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "427ca40b-946d-4d65-88c0-ff97ea8e8842", "eventTime": "2019-07-22T17:23:01Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:eu-west-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "070dba4e-e155-4365-8f70-6dc7cff16fb5", "record_id": "flaws_cloudtrail:0000434:070dba4e-e155-4365-8f70-6dc7cff16fb5", "row_index": 434, "timestamp": "2019-07-22T17:23:01Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 922, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "070dba4e-e155-4365-8f70-6dc7cff16fb5", "eventTime": "2019-07-22T17:23:01Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:eu-west-2:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c34d9c2f-50c6-4ea7-9334-16deb29bb990", "record_id": "flaws_cloudtrail:0000435:c34d9c2f-50c6-4ea7-9334-16deb29bb990", "row_index": 435, "timestamp": "2019-07-22T17:23:01Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 922, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c34d9c2f-50c6-4ea7-9334-16deb29bb990", "eventTime": "2019-07-22T17:23:01Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:eu-west-3:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85f88c9f-118e-41d7-9120-60375b043f15", "record_id": "flaws_cloudtrail:0000436:85f88c9f-118e-41d7-9120-60375b043f15", "row_index": 436, "timestamp": "2019-07-22T17:23:01Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85f88c9f-118e-41d7-9120-60375b043f15", "eventTime": "2019-07-22T17:23:01Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5155cc69-15d0-4a81-b60f-64d5523cec7c", "record_id": "flaws_cloudtrail:0000437:5155cc69-15d0-4a81-b60f-64d5523cec7c", "row_index": 437, "timestamp": "2019-07-22T17:23:01Z", "event_type": "ListIdentities", "event_source": "ses.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5155cc69-15d0-4a81-b60f-64d5523cec7c", "eventTime": "2019-07-22T17:23:01Z", "eventName": "ListIdentities", "eventSource": "ses.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: ses:ListIdentities", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "093f04c4-0efb-487e-804b-2cf181f8f5f6", "record_id": "flaws_cloudtrail:0000438:093f04c4-0efb-487e-804b-2cf181f8f5f6", "row_index": 438, "timestamp": "2019-07-22T17:23:01Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "093f04c4-0efb-487e-804b-2cf181f8f5f6", "eventTime": "2019-07-22T17:23:01Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da8020a7-aa4f-4893-9f9b-065de17724a9", "record_id": "flaws_cloudtrail:0000439:da8020a7-aa4f-4893-9f9b-065de17724a9", "row_index": 439, "timestamp": "2019-07-22T17:23:01Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da8020a7-aa4f-4893-9f9b-065de17724a9", "eventTime": "2019-07-22T17:23:01Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ebf01be-62ca-4eaa-9daf-8be530449c35", "record_id": "flaws_cloudtrail:0000440:8ebf01be-62ca-4eaa-9daf-8be530449c35", "row_index": 440, "timestamp": "2019-07-22T17:23:01Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ebf01be-62ca-4eaa-9daf-8be530449c35", "eventTime": "2019-07-22T17:23:01Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70abcc5c-e650-48f5-986c-a07ab3d9a86e", "record_id": "flaws_cloudtrail:0000441:70abcc5c-e650-48f5-986c-a07ab3d9a86e", "row_index": 441, "timestamp": "2019-07-22T17:23:01Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 869, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70abcc5c-e650-48f5-986c-a07ab3d9a86e", "eventTime": "2019-07-22T17:23:01Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d17e13ad-c448-451e-baa9-5f08d3a3817e", "record_id": "flaws_cloudtrail:0000442:d17e13ad-c448-451e-baa9-5f08d3a3817e", "row_index": 442, "timestamp": "2019-07-22T17:23:01Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d17e13ad-c448-451e-baa9-5f08d3a3817e", "eventTime": "2019-07-22T17:23:01Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13ac7567-66a8-4bfb-9efe-1a3792bb6f6d", "record_id": "flaws_cloudtrail:0000443:13ac7567-66a8-4bfb-9efe-1a3792bb6f6d", "row_index": 443, "timestamp": "2019-07-22T17:23:01Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13ac7567-66a8-4bfb-9efe-1a3792bb6f6d", "eventTime": "2019-07-22T17:23:01Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ba2a0ae-9813-40c3-aa0b-25d863029166", "record_id": "flaws_cloudtrail:0000444:0ba2a0ae-9813-40c3-aa0b-25d863029166", "row_index": 444, "timestamp": "2019-07-22T17:23:01Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ba2a0ae-9813-40c3-aa0b-25d863029166", "eventTime": "2019-07-22T17:23:01Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e508f4fe-ba90-4c1b-8ae9-983f88cd6c2b", "record_id": "flaws_cloudtrail:0000445:e508f4fe-ba90-4c1b-8ae9-983f88cd6c2b", "row_index": 445, "timestamp": "2019-07-22T17:23:01Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e508f4fe-ba90-4c1b-8ae9-983f88cd6c2b", "eventTime": "2019-07-22T17:23:01Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab63307-6ad0-455f-910a-7cd5f5770554", "record_id": "flaws_cloudtrail:0000446:ab63307-6ad0-455f-910a-7cd5f5770554", "row_index": 446, "timestamp": "2019-07-22T17:23:01Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab63307-6ad0-455f-910a-7cd5f5770554", "eventTime": "2019-07-22T17:23:01Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "[Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"], "bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58fec890-b854-481b-99ee-adcd19ce50d4", "record_id": "flaws_cloudtrail:0000447:58fec890-b854-481b-99ee-adcd19ce50d4", "row_index": 447, "timestamp": "2019-07-22T17:23:01Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 922, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58fec890-b854-481b-99ee-adcd19ce50d4", "eventTime": "2019-07-22T17:23:01Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:us-east-2:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae902ca6-42c7-4f1b-a1c5-ce96440a94", "record_id": "flaws_cloudtrail:0000448:ae902ca6-42c7-4f1b-a1c5-ce96440a94", "row_index": 448, "timestamp": "2019-07-22T17:23:01Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae902ca6-42c7-4f1b-a1c5-ce96440a94", "eventTime": "2019-07-22T17:23:01Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09d80d96-7bab-422a-8c78-0bc185c3ce2e", "record_id": "flaws_cloudtrail:0000449:09d80d96-7bab-422a-8c78-0bc185c3ce2e", "row_index": 449, "timestamp": "2019-07-22T17:23:01Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09d80d96-7bab-422a-8c78-0bc185c3ce2e", "eventTime": "2019-07-22T17:23:01Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "064669f30-afe3-420d-97bf-c3c3f71bf33d", "record_id": "flaws_cloudtrail:0000450:064669f30-afe3-420d-97bf-c3c3f71bf33d", "row_index": 450, "timestamp": "2019-07-22T17:23:01Z", "event_type": "DescribeCacheParameterGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "064669f30-afe3-420d-97bf-c3c3f71bf33d", "eventTime": "2019-07-22T17:23:01Z", "eventName": "DescribeCacheParameterGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheParameterGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea1c54d4-3f37-473b-9204-bfdeb7e725cc", "record_id": "flaws_cloudtrail:0000451:ea1c54d4-3f37-473b-9204-bfdeb7e725cc", "row_index": 451, "timestamp": "2019-07-22T17:23:02Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 932, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea1c54d4-3f37-473b-9204-bfdeb7e725cc", "eventTime": "2019-07-22T17:23:02Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:ap-northeast-2:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b92289-d166-40fc-b1f2-e17a7ed23b10", "record_id": "flaws_cloudtrail:0000452:b92289-d166-40fc-b1f2-e17a7ed23b10", "row_index": 452, "timestamp": "2019-07-22T17:23:02Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 922, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b92289-d166-40fc-b1f2-e17a7ed23b10", "eventTime": "2019-07-22T17:23:02Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:ap-south-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57cfd647-9894-4e7e-85f0-0d5a28e52d82", "record_id": "flaws_cloudtrail:0000453:57cfd647-9894-4e7e-85f0-0d5a28e52d82", "row_index": 453, "timestamp": "2019-07-22T17:23:02Z", "event_type": "ListIdentities", "event_source": "ses.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57cfd647-9894-4e7e-85f0-0d5a28e52d82", "eventTime": "2019-07-22T17:23:02Z", "eventName": "ListIdentities", "eventSource": "ses.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: ses:ListIdentities", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5304cc0d-0418-4020-83ab-0c60e76c9c8c", "record_id": "flaws_cloudtrail:0000454:5304cc0d-0418-4020-83ab-0c60e76c9c8c", "row_index": 454, "timestamp": "2019-07-22T17:23:02Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 929, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5304cc0d-0418-4020-83ab-0c60e76c9c8c", "eventTime": "2019-07-22T17:23:02Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:ca-central-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d96f4e36-4a7c-4112-924c-2dd227aedfed", "record_id": "flaws_cloudtrail:0000455:d96f4e36-4a7c-4112-924c-2dd227aedfed", "row_index": 455, "timestamp": "2019-07-22T17:23:02Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 928, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d96f4e36-4a7c-4112-924c-2dd227aedfed", "eventTime": "2019-07-22T17:23:02Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:eu-central-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d0f8222-803a-4995-af96-11ec6a49bf03", "record_id": "flaws_cloudtrail:0000456:0d0f8222-803a-4995-af96-11ec6a49bf03", "row_index": 456, "timestamp": "2019-07-22T17:23:02Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d0f8222-803a-4995-af96-11ec6a49bf03", "eventTime": "2019-07-22T17:23:02Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:eu-west-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3322b693-3014-40fc-959d-babf5aca4e84", "record_id": "flaws_cloudtrail:0000457:3322b693-3014-40fc-959d-babf5aca4e84", "row_index": 457, "timestamp": "2019-07-22T17:23:02Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3322b693-3014-40fc-959d-babf5aca4e84", "eventTime": "2019-07-22T17:23:02Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:us-east-2:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34d3dc69-56c2-4b35-9df3-128e69351a00", "record_id": "flaws_cloudtrail:0000458:34d3dc69-56c2-4b35-9df3-128e69351a00", "row_index": 458, "timestamp": "2019-07-22T17:23:02Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 922, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34d3dc69-56c2-4b35-9df3-128e69351a00", "eventTime": "2019-07-22T17:23:02Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:us-west-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83f8e68d-bccf-42e0-b384-66418d14", "record_id": "flaws_cloudtrail:0000459:83f8e68d-bccf-42e0-b384-66418d14", "row_index": 459, "timestamp": "2019-07-22T17:23:02Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 918, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83f8e68d-bccf-42e0-b384-66418d14", "eventTime": "2019-07-22T17:23:02Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:us-west-2:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5dc9edee-3165-4b18-89e3-c8190b12d450", "record_id": "flaws_cloudtrail:0000460:5dc9edee-3165-4b18-89e3-c8190b12d450", "row_index": 460, "timestamp": "2019-07-22T17:23:02Z", "event_type": "ListIdentities", "event_source": "ses.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5dc9edee-3165-4b18-89e3-c8190b12d450", "eventTime": "2019-07-22T17:23:02Z", "eventName": "ListIdentities", "eventSource": "ses.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: ses:ListIdentities", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea1c54d4-3f37-473b-9204-bfdeb7e725cc", "record_id": "flaws_cloudtrail:0000461:ea1c54d4-3f37-473b-9204-bfdeb7e725cc", "row_index": 461, "timestamp": "2019-07-22T17:23:02Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 932, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea1c54d4-3f37-473b-9204-bfdeb7e725cc", "eventTime": "2019-07-22T17:23:02Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:ap-northeast-2:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b92289-d166-40fc-b1f2-e17a7ed23b10", "record_id": "flaws_cloudtrail:0000462:b92289-d166-40fc-b1f2-e17a7ed23b10", "row_index": 462, "timestamp": "2019-07-22T17:23:02Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 922, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b92289-d166-40fc-b1f2-e17a7ed23b10", "eventTime": "2019-07-22T17:23:02Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:ap-south-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57cfd647-9894-4e7e-85f0-0d5a28e52d82", "record_id": "flaws_cloudtrail:0000463:57cfd647-9894-4e7e-85f0-0d5a28e52d82", "row_index": 463, "timestamp": "2019-07-22T17:23:02Z", "event_type": "ListIdentities", "event_source": "ses.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57cfd647-9894-4e7e-85f0-0d5a28e52d82", "eventTime": "2019-07-22T17:23:02Z", "eventName": "ListIdentities", "eventSource": "ses.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: ses:ListIdentities", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5304cc0d-0418-4020-83ab-0c60e76c9c8c", "record_id": "flaws_cloudtrail:0000464:5304cc0d-0418-4020-83ab-0c60e76c9c8c", "row_index": 464, "timestamp": "2019-07-22T17:23:02Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 929, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5304cc0d-0418-4020-83ab-0c60e76c9c8c", "eventTime": "2019-07-22T17:23:02Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:ca-central-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d96f4e36-4a7c-4112-924c-2dd227aedfed", "record_id": "flaws_cloudtrail:0000465:d96f4e36-4a7c-4112-924c-2dd227aedfed", "row_index": 465, "timestamp": "2019-07-22T17:23:02Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 928, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d96f4e36-4a7c-4112-924c-2dd227aedfed", "eventTime": "2019-07-22T17:23:02Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:eu-central-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d0f8222-803a-4995-af96-11ec6a49bf03", "record_id": "flaws_cloudtrail:0000466:0d0f8222-803a-4995-af96-11ec6a49bf03", "row_index": 466, "timestamp": "2019-07-22T17:23:02Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d0f8222-803a-4995-af96-11ec6a49bf03", "eventTime": "2019-07-22T17:23:02Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:eu-west-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3322b693-3014-40fc-959d-babf5aca4e84", "record_id": "flaws_cloudtrail:0000467:3322b693-3014-40fc-959d-babf5aca4e84", "row_index": 467, "timestamp": "2019-07-22T17:23:02Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3322b693-3014-40fc-959d-babf5aca4e84", "eventTime": "2019-07-22T17:23:02Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:us-east-2:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34d3dc69-56c2-4b35-9df3-128e69351a00", "record_id": "flaws_cloudtrail:0000468:34d3dc69-56c2-4b35-9df3-128e69351a00", "row_index": 468, "timestamp": "2019-07-22T17:23:02Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 922, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34d3dc69-56c2-4b35-9df3-128e69351a00", "eventTime": "2019-07-22T17:23:02Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:us-west-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5dc9edee-3165-4b18-89e3-c8190b12d450", "record_id": "flaws_cloudtrail:0000469:5dc9edee-3165-4b18-89e3-c8190b12d450", "row_index": 469, "timestamp": "2019-07-22T17:23:02Z", "event_type": "ListIdentities", "event_source": "ses.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5dc9edee-3165-4b18-89e3-c8190b12d450", "eventTime": "2019-07-22T17:23:02Z", "eventName": "ListIdentities", "eventSource": "ses.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: ses:ListIdentities", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83f8e68d-bccf-42e0-b384-66418d14", "record_id": "flaws_cloudtrail:0000470:83f8e68d-bccf-42e0-b384-66418d14", "row_index": 470, "timestamp": "2019-07-22T17:23:02Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 918, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83f8e68d-bccf-42e0-b384-66418d14", "eventTime": "2019-07-22T17:23:02Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:us-west-2:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10de639d-f848-4afa-a1eb-eccc7a4e8354", "record_id": "flaws_cloudtrail:0000471:10de639d-f848-4afa-a1eb-eccc7a4e8354", "row_index": 471, "timestamp": "2019-07-22T17:23:03Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 932, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10de639d-f848-4afa-a1eb-eccc7a4e8354", "eventTime": "2019-07-22T17:23:03Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:ap-northeast-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "580601-9512-4f67-9806-57de2c7d3f29", "record_id": "flaws_cloudtrail:0000472:580601-9512-4f67-9806-57de2c7d3f29", "row_index": 472, "timestamp": "2019-07-22T17:23:03Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "580601-9512-4f67-9806-57de2c7d3f29", "eventTime": "2019-07-22T17:23:03Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ap-northeast-2:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2e1ac49-3e6a-4cb0-8c07-1c5f4eb539e6", "record_id": "flaws_cloudtrail:0000473:c2e1ac49-3e6a-4cb0-8c07-1c5f4eb539e6", "row_index": 473, "timestamp": "2019-07-22T17:23:03Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 932, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2e1ac49-3e6a-4cb0-8c07-1c5f4eb539e6", "eventTime": "2019-07-22T17:23:03Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:ap-southeast-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "118988fb-70be-49ce-8e33-0325df86219", "record_id": "flaws_cloudtrail:0000474:118988fb-70be-49ce-8e33-0325df86219", "row_index": 474, "timestamp": "2019-07-22T17:23:03Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 931, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "118988fb-70be-49ce-8e33-0325df86219", "eventTime": "2019-07-22T17:23:03Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:ap-southeast-2:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b96e34b-e2b3-4052-9e1f-4df61ba71242", "record_id": "flaws_cloudtrail:0000475:1b96e34b-e2b3-4052-9e1f-4df61ba71242", "row_index": 475, "timestamp": "2019-07-22T17:23:03Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 891, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b96e34b-e2b3-4052-9e1f-4df61ba71242", "eventTime": "2019-07-22T17:23:03Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:eu-central-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "309b8947-b7fd-44e0-8fd3-66c21a796e91", "record_id": "flaws_cloudtrail:0000476:309b8947-b7fd-44e0-8fd3-66c21a796e91", "row_index": 476, "timestamp": "2019-07-22T17:23:03Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 887, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "309b8947-b7fd-44e0-8fd3-66c21a796e91", "eventTime": "2019-07-22T17:23:03Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:eu-north-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5af828ab-00af-4df5-8c9d-399db58f4f51", "record_id": "flaws_cloudtrail:0000477:5af828ab-00af-4df5-8c9d-399db58f4f51", "row_index": 477, "timestamp": "2019-07-22T17:23:03Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5af828ab-00af-4df5-8c9d-399db58f4f51", "eventTime": "2019-07-22T17:23:03Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:eu-west-3:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bfdc61f4-4f94-44ec-b74f-2cb905aedece", "record_id": "flaws_cloudtrail:0000478:bfdc61f4-4f94-44ec-b74f-2cb905aedece", "row_index": 478, "timestamp": "2019-07-22T17:23:03Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bfdc61f4-4f94-44ec-b74f-2cb905aedece", "eventTime": "2019-07-22T17:23:03Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:us-west-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10de639d-f848-4afa-a1eb-eccc7a4e8354", "record_id": "flaws_cloudtrail:0000479:10de639d-f848-4afa-a1eb-eccc7a4e8354", "row_index": 479, "timestamp": "2019-07-22T17:23:03Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 932, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10de639d-f848-4afa-a1eb-eccc7a4e8354", "eventTime": "2019-07-22T17:23:03Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:ap-northeast-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "580601-9512-4f67-9806-57de2c7d3f29", "record_id": "flaws_cloudtrail:0000480:580601-9512-4f67-9806-57de2c7d3f29", "row_index": 480, "timestamp": "2019-07-22T17:23:03Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "580601-9512-4f67-9806-57de2c7d3f29", "eventTime": "2019-07-22T17:23:03Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ap-northeast-2:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2e1ac49-3e6a-4cb0-8c07-1c5f4eb539e6", "record_id": "flaws_cloudtrail:0000481:c2e1ac49-3e6a-4cb0-8c07-1c5f4eb539e6", "row_index": 481, "timestamp": "2019-07-22T17:23:03Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 932, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2e1ac49-3e6a-4cb0-8c07-1c5f4eb539e6", "eventTime": "2019-07-22T17:23:03Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:ap-southeast-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "118988fb-70be-49ce-8e33-0325df86219", "record_id": "flaws_cloudtrail:0000482:118988fb-70be-49ce-8e33-0325df86219", "row_index": 482, "timestamp": "2019-07-22T17:23:03Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 931, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "118988fb-70be-49ce-8e33-0325df86219", "eventTime": "2019-07-22T17:23:03Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:ap-southeast-2:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b96e34b-e2b3-4052-9e1f-4df61ba71242", "record_id": "flaws_cloudtrail:0000483:1b96e34b-e2b3-4052-9e1f-4df61ba71242", "row_index": 483, "timestamp": "2019-07-22T17:23:03Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 891, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b96e34b-e2b3-4052-9e1f-4df61ba71242", "eventTime": "2019-07-22T17:23:03Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:eu-central-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "309b8947-b7fd-44e0-8fd3-66c21a796e91", "record_id": "flaws_cloudtrail:0000484:309b8947-b7fd-44e0-8fd3-66c21a796e91", "row_index": 484, "timestamp": "2019-07-22T17:23:03Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 887, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "309b8947-b7fd-44e0-8fd3-66c21a796e91", "eventTime": "2019-07-22T17:23:03Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:eu-north-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5af828ab-00af-4df5-8c9d-399db58f4f51", "record_id": "flaws_cloudtrail:0000485:5af828ab-00af-4df5-8c9d-399db58f4f51", "row_index": 485, "timestamp": "2019-07-22T17:23:03Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5af828ab-00af-4df5-8c9d-399db58f4f51", "eventTime": "2019-07-22T17:23:03Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:eu-west-3:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bfdc61f4-4f94-44ec-b74f-2cb905aedece", "record_id": "flaws_cloudtrail:0000486:bfdc61f4-4f94-44ec-b74f-2cb905aedece", "row_index": 486, "timestamp": "2019-07-22T17:23:03Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bfdc61f4-4f94-44ec-b74f-2cb905aedece", "eventTime": "2019-07-22T17:23:03Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:us-west-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39473eb-6411-488d-9baa-f262b2451f05", "record_id": "flaws_cloudtrail:0000487:39473eb-6411-488d-9baa-f262b2451f05", "row_index": 487, "timestamp": "2019-07-22T17:23:04Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39473eb-6411-488d-9baa-f262b2451f05", "eventTime": "2019-07-22T17:23:04Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ap-northeast-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe2fcebf-28bf-41ef-a72d-4afa36ab6e6c", "record_id": "flaws_cloudtrail:0000488:fe2fcebf-28bf-41ef-a72d-4afa36ab6e6c", "row_index": 488, "timestamp": "2019-07-22T17:23:04Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe2fcebf-28bf-41ef-a72d-4afa36ab6e6c", "eventTime": "2019-07-22T17:23:04Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6925d30d-e80b-473d-b1a0-b1e949bbfd25", "record_id": "flaws_cloudtrail:0000489:6925d30d-e80b-473d-b1a0-b1e949bbfd25", "row_index": 489, "timestamp": "2019-07-22T17:23:04Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6925d30d-e80b-473d-b1a0-b1e949bbfd25", "eventTime": "2019-07-22T17:23:04Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ap-south-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de443a9f-cd2a-4130-abb4-22ceabcc499f", "record_id": "flaws_cloudtrail:0000490:de443a9f-cd2a-4130-abb4-22ceabcc499f", "row_index": 490, "timestamp": "2019-07-22T17:23:04Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de443a9f-cd2a-4130-abb4-22ceabcc499f", "eventTime": "2019-07-22T17:23:04Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e099da5-d151-4e34-8466-f2b778a4a49a", "record_id": "flaws_cloudtrail:0000491:1e099da5-d151-4e34-8466-f2b778a4a49a", "row_index": 491, "timestamp": "2019-07-22T17:23:04Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 895, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e099da5-d151-4e34-8466-f2b778a4a49a", "eventTime": "2019-07-22T17:23:04Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ap-southeast-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "533f8258-f551-41ad-b491-f09cb52fbe9f", "record_id": "flaws_cloudtrail:0000492:533f8258-f551-41ad-b491-f09cb52fbe9f", "row_index": 492, "timestamp": "2019-07-22T17:23:04Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "533f8258-f551-41ad-b491-f09cb52fbe9f", "eventTime": "2019-07-22T17:23:04Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ap-southeast-2:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "955bea4c-97f2-4c1c-81d2-2f6b202441ff", "record_id": "flaws_cloudtrail:0000493:955bea4c-97f2-4c1c-81d2-2f6b202441ff", "row_index": 493, "timestamp": "2019-07-22T17:23:04Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 891, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "955bea4c-97f2-4c1c-81d2-2f6b202441ff", "eventTime": "2019-07-22T17:23:04Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ca-central-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17cc16cc-966f-4a18-81a1-859caa9ce455", "record_id": "flaws_cloudtrail:0000494:17cc16cc-966f-4a18-81a1-859caa9ce455", "row_index": 494, "timestamp": "2019-07-22T17:23:04Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17cc16cc-966f-4a18-81a1-859caa9ce455", "eventTime": "2019-07-22T17:23:04Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af82ecb1-f65c-4363-8f7e-43f283b566dc", "record_id": "flaws_cloudtrail:0000495:af82ecb1-f65c-4363-8f7e-43f283b566dc", "row_index": 495, "timestamp": "2019-07-22T17:23:04Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af82ecb1-f65c-4363-8f7e-43f283b566dc", "eventTime": "2019-07-22T17:23:04Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "713799d37-f589-4d6a-b9ec-8cdebd3fa7e6", "record_id": "flaws_cloudtrail:0000496:713799d37-f589-4d6a-b9ec-8cdebd3fa7e6", "row_index": 496, "timestamp": "2019-07-22T17:23:04Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "713799d37-f589-4d6a-b9ec-8cdebd3fa7e6", "eventTime": "2019-07-22T17:23:04Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68014-13c5-428d-9509-c59988dfaeea", "record_id": "flaws_cloudtrail:0000497:68014-13c5-428d-9509-c59988dfaeea", "row_index": 497, "timestamp": "2019-07-22T17:23:04Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68014-13c5-428d-9509-c59988dfaeea", "eventTime": "2019-07-22T17:23:04Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49f8c6a0-fc38-41b4-a657-340ef51eb95a", "record_id": "flaws_cloudtrail:0000498:49f8c6a0-fc38-41b4-a657-340ef51eb95a", "row_index": 498, "timestamp": "2019-07-22T17:23:04Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49f8c6a0-fc38-41b4-a657-340ef51eb95a", "eventTime": "2019-07-22T17:23:04Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:eu-west-2:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7940d784-6fe9-49e5-b11f-4c5f05077924", "record_id": "flaws_cloudtrail:0000499:7940d784-6fe9-49e5-b11f-4c5f05077924", "row_index": 499, "timestamp": "2019-07-22T17:23:04Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7940d784-6fe9-49e5-b11f-4c5f05077924", "eventTime": "2019-07-22T17:23:04Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1372d3a9-9305-4c04-99da-15e65c40bda5", "record_id": "flaws_cloudtrail:0000500:1372d3a9-9305-4c04-99da-15e65c40bda5", "row_index": 500, "timestamp": "2019-07-22T17:23:04Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1372d3a9-9305-4c04-99da-15e65c40bda5", "eventTime": "2019-07-22T17:23:04Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79b15da6-6d40-42c8-8925-e281bfce3ccd", "record_id": "flaws_cloudtrail:0000501:79b15da6-6d40-42c8-8925-e281bfce3ccd", "row_index": 501, "timestamp": "2019-07-22T17:23:04Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79b15da6-6d40-42c8-8925-e281bfce3ccd", "eventTime": "2019-07-22T17:23:04Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97c85990-319e-425b-91e0-50f3e9dc4114", "record_id": "flaws_cloudtrail:0000502:97c85990-319e-425b-91e0-50f3e9dc4114", "row_index": 502, "timestamp": "2019-07-22T17:23:04Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97c85990-319e-425b-91e0-50f3e9dc4114", "eventTime": "2019-07-22T17:23:04Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:sa-east-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "812a4870-7f43-494a-92ea-eadcdebf2112", "record_id": "flaws_cloudtrail:0000503:812a4870-7f43-494a-92ea-eadcdebf2112", "row_index": 503, "timestamp": "2019-07-22T17:23:04Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "812a4870-7f43-494a-92ea-eadcdebf2112", "eventTime": "2019-07-22T17:23:04Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:us-east-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5bd4dbb7-0864-4809-970e-2309a9a2d285", "record_id": "flaws_cloudtrail:0000504:5bd4dbb7-0864-4809-970e-2309a9a2d285", "row_index": 504, "timestamp": "2019-07-22T17:23:04Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5bd4dbb7-0864-4809-970e-2309a9a2d285", "eventTime": "2019-07-22T17:23:04Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8720c50-35e6-4096-9eed-a151c63e3d98", "record_id": "flaws_cloudtrail:0000505:c8720c50-35e6-4096-9eed-a151c63e3d98", "row_index": 505, "timestamp": "2019-07-22T17:23:04Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8720c50-35e6-4096-9eed-a151c63e3d98", "eventTime": "2019-07-22T17:23:04Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a26118e5-db39-425f-836a-28ff0135b833", "record_id": "flaws_cloudtrail:0000506:a26118e5-db39-425f-836a-28ff0135b833", "row_index": 506, "timestamp": "2019-07-22T17:23:04Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a26118e5-db39-425f-836a-28ff0135b833", "eventTime": "2019-07-22T17:23:04Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "273cf33f-ef16-4c8b-9e2c-a45078450da9", "record_id": "flaws_cloudtrail:0000507:273cf33f-ef16-4c8b-9e2c-a45078450da9", "row_index": 507, "timestamp": "2019-07-22T17:23:04Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "273cf33f-ef16-4c8b-9e2c-a45078450da9", "eventTime": "2019-07-22T17:23:04Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:us-west-2:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39473eb-6411-488d-9baa-f262b2451f05", "record_id": "flaws_cloudtrail:0000508:39473eb-6411-488d-9baa-f262b2451f05", "row_index": 508, "timestamp": "2019-07-22T17:23:04Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39473eb-6411-488d-9baa-f262b2451f05", "eventTime": "2019-07-22T17:23:04Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ap-northeast-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe2fcebf-28bf-41ef-a72d-4afa36ab6e6c", "record_id": "flaws_cloudtrail:0000509:fe2fcebf-28bf-41ef-a72d-4afa36ab6e6c", "row_index": 509, "timestamp": "2019-07-22T17:23:04Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe2fcebf-28bf-41ef-a72d-4afa36ab6e6c", "eventTime": "2019-07-22T17:23:04Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6925d30d-e80b-473d-b1a0-b1e949bbfd25", "record_id": "flaws_cloudtrail:0000510:6925d30d-e80b-473d-b1a0-b1e949bbfd25", "row_index": 510, "timestamp": "2019-07-22T17:23:04Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6925d30d-e80b-473d-b1a0-b1e949bbfd25", "eventTime": "2019-07-22T17:23:04Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ap-south-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de443a9f-cd2a-4130-abb4-22ceabcc499f", "record_id": "flaws_cloudtrail:0000511:de443a9f-cd2a-4130-abb4-22ceabcc499f", "row_index": 511, "timestamp": "2019-07-22T17:23:04Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de443a9f-cd2a-4130-abb4-22ceabcc499f", "eventTime": "2019-07-22T17:23:04Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e099da5-d151-4e34-8466-f2b778a4a49a", "record_id": "flaws_cloudtrail:0000512:1e099da5-d151-4e34-8466-f2b778a4a49a", "row_index": 512, "timestamp": "2019-07-22T17:23:04Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 895, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e099da5-d151-4e34-8466-f2b778a4a49a", "eventTime": "2019-07-22T17:23:04Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ap-southeast-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "533f8258-f551-41ad-b491-f09cb52fbe9f", "record_id": "flaws_cloudtrail:0000513:533f8258-f551-41ad-b491-f09cb52fbe9f", "row_index": 513, "timestamp": "2019-07-22T17:23:04Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "533f8258-f551-41ad-b491-f09cb52fbe9f", "eventTime": "2019-07-22T17:23:04Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ap-southeast-2:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "955bea4c-97f2-4c1c-81d2-2f6b202441ff", "record_id": "flaws_cloudtrail:0000514:955bea4c-97f2-4c1c-81d2-2f6b202441ff", "row_index": 514, "timestamp": "2019-07-22T17:23:04Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 891, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "955bea4c-97f2-4c1c-81d2-2f6b202441ff", "eventTime": "2019-07-22T17:23:04Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:ca-central-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17cc16cc-966f-4a18-81a1-859caa9ce455", "record_id": "flaws_cloudtrail:0000515:17cc16cc-966f-4a18-81a1-859caa9ce455", "row_index": 515, "timestamp": "2019-07-22T17:23:04Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17cc16cc-966f-4a18-81a1-859caa9ce455", "eventTime": "2019-07-22T17:23:04Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af82ecb1-f65c-4363-8f7e-43f283b566dc", "record_id": "flaws_cloudtrail:0000516:af82ecb1-f65c-4363-8f7e-43f283b566dc", "row_index": 516, "timestamp": "2019-07-22T17:23:04Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af82ecb1-f65c-4363-8f7e-43f283b566dc", "eventTime": "2019-07-22T17:23:04Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68014-13c5-428d-9509-c59988dfaeea", "record_id": "flaws_cloudtrail:0000517:68014-13c5-428d-9509-c59988dfaeea", "row_index": 517, "timestamp": "2019-07-22T17:23:04Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68014-13c5-428d-9509-c59988dfaeea", "eventTime": "2019-07-22T17:23:04Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "713799d37-f589-4d6a-b9ec-8cdebd3fa7e6", "record_id": "flaws_cloudtrail:0000518:713799d37-f589-4d6a-b9ec-8cdebd3fa7e6", "row_index": 518, "timestamp": "2019-07-22T17:23:04Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "713799d37-f589-4d6a-b9ec-8cdebd3fa7e6", "eventTime": "2019-07-22T17:23:04Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49f8c6a0-fc38-41b4-a657-340ef51eb95a", "record_id": "flaws_cloudtrail:0000519:49f8c6a0-fc38-41b4-a657-340ef51eb95a", "row_index": 519, "timestamp": "2019-07-22T17:23:04Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49f8c6a0-fc38-41b4-a657-340ef51eb95a", "eventTime": "2019-07-22T17:23:04Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:eu-west-2:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7940d784-6fe9-49e5-b11f-4c5f05077924", "record_id": "flaws_cloudtrail:0000520:7940d784-6fe9-49e5-b11f-4c5f05077924", "row_index": 520, "timestamp": "2019-07-22T17:23:04Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7940d784-6fe9-49e5-b11f-4c5f05077924", "eventTime": "2019-07-22T17:23:04Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1372d3a9-9305-4c04-99da-15e65c40bda5", "record_id": "flaws_cloudtrail:0000521:1372d3a9-9305-4c04-99da-15e65c40bda5", "row_index": 521, "timestamp": "2019-07-22T17:23:04Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1372d3a9-9305-4c04-99da-15e65c40bda5", "eventTime": "2019-07-22T17:23:04Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79b15da6-6d40-42c8-8925-e281bfce3ccd", "record_id": "flaws_cloudtrail:0000522:79b15da6-6d40-42c8-8925-e281bfce3ccd", "row_index": 522, "timestamp": "2019-07-22T17:23:04Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79b15da6-6d40-42c8-8925-e281bfce3ccd", "eventTime": "2019-07-22T17:23:04Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97c85990-319e-425b-91e0-50f3e9dc4114", "record_id": "flaws_cloudtrail:0000523:97c85990-319e-425b-91e0-50f3e9dc4114", "row_index": 523, "timestamp": "2019-07-22T17:23:04Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97c85990-319e-425b-91e0-50f3e9dc4114", "eventTime": "2019-07-22T17:23:04Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:sa-east-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "812a4870-7f43-494a-92ea-eadcdebf2112", "record_id": "flaws_cloudtrail:0000524:812a4870-7f43-494a-92ea-eadcdebf2112", "row_index": 524, "timestamp": "2019-07-22T17:23:04Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "812a4870-7f43-494a-92ea-eadcdebf2112", "eventTime": "2019-07-22T17:23:04Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:us-east-1:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5bd4dbb7-0864-4809-970e-2309a9a2d285", "record_id": "flaws_cloudtrail:0000525:5bd4dbb7-0864-4809-970e-2309a9a2d285", "row_index": 525, "timestamp": "2019-07-22T17:23:04Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5bd4dbb7-0864-4809-970e-2309a9a2d285", "eventTime": "2019-07-22T17:23:04Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8720c50-35e6-4096-9eed-a151c63e3d98", "record_id": "flaws_cloudtrail:0000526:c8720c50-35e6-4096-9eed-a151c63e3d98", "row_index": 526, "timestamp": "2019-07-22T17:23:04Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8720c50-35e6-4096-9eed-a151c63e3d98", "eventTime": "2019-07-22T17:23:04Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a26118e5-db39-425f-836a-28ff0135b833", "record_id": "flaws_cloudtrail:0000527:a26118e5-db39-425f-836a-28ff0135b833", "row_index": 527, "timestamp": "2019-07-22T17:23:04Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a26118e5-db39-425f-836a-28ff0135b833", "eventTime": "2019-07-22T17:23:04Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "273cf33f-ef16-4c8b-9e2c-a45078450da9", "record_id": "flaws_cloudtrail:0000528:273cf33f-ef16-4c8b-9e2c-a45078450da9", "row_index": 528, "timestamp": "2019-07-22T17:23:04Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "273cf33f-ef16-4c8b-9e2c-a45078450da9", "eventTime": "2019-07-22T17:23:04Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudwatch:DescribeAlarms on resource: arn:aws:cloudwatch:us-west-2:811596193553:alarm:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2356fca-fd77-4b71-a7a2-b46efae08e54", "record_id": "flaws_cloudtrail:0000529:c2356fca-fd77-4b71-a7a2-b46efae08e54", "row_index": 529, "timestamp": "2019-07-22T17:23:05Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2356fca-fd77-4b71-a7a2-b46efae08e54", "eventTime": "2019-07-22T17:23:05Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7d988887-45ed-4094-b7f7-8f18a6db7884", "record_id": "flaws_cloudtrail:0000530:a7d988887-45ed-4094-b7f7-8f18a6db7884", "row_index": 530, "timestamp": "2019-07-22T17:23:05Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7d988887-45ed-4094-b7f7-8f18a6db7884", "eventTime": "2019-07-22T17:23:05Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52e9c7b0-7b8d-4ff7-ade1-d859630bc7", "record_id": "flaws_cloudtrail:0000531:52e9c7b0-7b8d-4ff7-ade1-d859630bc7", "row_index": 531, "timestamp": "2019-07-22T17:23:05Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52e9c7b0-7b8d-4ff7-ade1-d859630bc7", "eventTime": "2019-07-22T17:23:05Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb77dc5d-7243-4df1-bcdf-b27beffb6b67", "record_id": "flaws_cloudtrail:0000532:fb77dc5d-7243-4df1-bcdf-b27beffb6b67", "row_index": 532, "timestamp": "2019-07-22T17:23:05Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb77dc5d-7243-4df1-bcdf-b27beffb6b67", "eventTime": "2019-07-22T17:23:05Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "676ae15d-10f0-4640-bae0-8586cb92165", "record_id": "flaws_cloudtrail:0000533:676ae15d-10f0-4640-bae0-8586cb92165", "row_index": 533, "timestamp": "2019-07-22T17:23:05Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "676ae15d-10f0-4640-bae0-8586cb92165", "eventTime": "2019-07-22T17:23:05Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce986d82-7e8a-4fdc-9250-2ec086232", "record_id": "flaws_cloudtrail:0000534:ce986d82-7e8a-4fdc-9250-2ec086232", "row_index": 534, "timestamp": "2019-07-22T17:23:05Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce986d82-7e8a-4fdc-9250-2ec086232", "eventTime": "2019-07-22T17:23:05Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b546a6b-2bcf-41ed-8dbb-fb9bbf033f80", "record_id": "flaws_cloudtrail:0000535:1b546a6b-2bcf-41ed-8dbb-fb9bbf033f80", "row_index": 535, "timestamp": "2019-07-22T17:23:05Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b546a6b-2bcf-41ed-8dbb-fb9bbf033f80", "eventTime": "2019-07-22T17:23:05Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dbd1f8f7-9ec6-49dc-89b6-5f4ac4491e15", "record_id": "flaws_cloudtrail:0000536:dbd1f8f7-9ec6-49dc-89b6-5f4ac4491e15", "row_index": 536, "timestamp": "2019-07-22T17:23:05Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dbd1f8f7-9ec6-49dc-89b6-5f4ac4491e15", "eventTime": "2019-07-22T17:23:05Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed124890c-0f1f-4059-a0e4-366d05bce3db", "record_id": "flaws_cloudtrail:0000537:ed124890c-0f1f-4059-a0e4-366d05bce3db", "row_index": 537, "timestamp": "2019-07-22T17:23:05Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed124890c-0f1f-4059-a0e4-366d05bce3db", "eventTime": "2019-07-22T17:23:05Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "382179e1b-7d8b-48f6-bb02-9a3dece119e6", "record_id": "flaws_cloudtrail:0000538:382179e1b-7d8b-48f6-bb02-9a3dece119e6", "row_index": 538, "timestamp": "2019-07-22T17:23:05Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "382179e1b-7d8b-48f6-bb02-9a3dece119e6", "eventTime": "2019-07-22T17:23:05Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e01aadc-5525-4d8d-b273-b4ac6e0ac14a", "record_id": "flaws_cloudtrail:0000539:1e01aadc-5525-4d8d-b273-b4ac6e0ac14a", "row_index": 539, "timestamp": "2019-07-22T17:23:05Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e01aadc-5525-4d8d-b273-b4ac6e0ac14a", "eventTime": "2019-07-22T17:23:05Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "126bfaee-45ec-4452-bb1a-8fe5c0dc951e", "record_id": "flaws_cloudtrail:0000540:126bfaee-45ec-4452-bb1a-8fe5c0dc951e", "row_index": 540, "timestamp": "2019-07-22T17:23:05Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "126bfaee-45ec-4452-bb1a-8fe5c0dc951e", "eventTime": "2019-07-22T17:23:05Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f03fb6bd-6a2f-4ea6-bafd-6a23255abafb", "record_id": "flaws_cloudtrail:0000541:f03fb6bd-6a2f-4ea6-bafd-6a23255abafb", "row_index": 541, "timestamp": "2019-07-22T17:23:05Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f03fb6bd-6a2f-4ea6-bafd-6a23255abafb", "eventTime": "2019-07-22T17:23:05Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2356fca-fd77-4b71-a7a2-b46efae08e54", "record_id": "flaws_cloudtrail:0000542:c2356fca-fd77-4b71-a7a2-b46efae08e54", "row_index": 542, "timestamp": "2019-07-22T17:23:05Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2356fca-fd77-4b71-a7a2-b46efae08e54", "eventTime": "2019-07-22T17:23:05Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7d988887-45ed-4094-b7f7-8f18a6db7884", "record_id": "flaws_cloudtrail:0000543:a7d988887-45ed-4094-b7f7-8f18a6db7884", "row_index": 543, "timestamp": "2019-07-22T17:23:05Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7d988887-45ed-4094-b7f7-8f18a6db7884", "eventTime": "2019-07-22T17:23:05Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52e9c7b0-7b8d-4ff7-ade1-d859630bc7", "record_id": "flaws_cloudtrail:0000544:52e9c7b0-7b8d-4ff7-ade1-d859630bc7", "row_index": 544, "timestamp": "2019-07-22T17:23:05Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 855, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52e9c7b0-7b8d-4ff7-ade1-d859630bc7", "eventTime": "2019-07-22T17:23:05Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb77dc5d-7243-4df1-bcdf-b27beffb6b67", "record_id": "flaws_cloudtrail:0000545:fb77dc5d-7243-4df1-bcdf-b27beffb6b67", "row_index": 545, "timestamp": "2019-07-22T17:23:05Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb77dc5d-7243-4df1-bcdf-b27beffb6b67", "eventTime": "2019-07-22T17:23:05Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "676ae15d-10f0-4640-bae0-8586cb92165", "record_id": "flaws_cloudtrail:0000546:676ae15d-10f0-4640-bae0-8586cb92165", "row_index": 546, "timestamp": "2019-07-22T17:23:05Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "676ae15d-10f0-4640-bae0-8586cb92165", "eventTime": "2019-07-22T17:23:05Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce986d82-7e8a-4fdc-9250-2ec086232", "record_id": "flaws_cloudtrail:0000547:ce986d82-7e8a-4fdc-9250-2ec086232", "row_index": 547, "timestamp": "2019-07-22T17:23:05Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce986d82-7e8a-4fdc-9250-2ec086232", "eventTime": "2019-07-22T17:23:05Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b546a6b-2bcf-41ed-8dbb-fb9bbf033f80", "record_id": "flaws_cloudtrail:0000548:1b546a6b-2bcf-41ed-8dbb-fb9bbf033f80", "row_index": 548, "timestamp": "2019-07-22T17:23:05Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b546a6b-2bcf-41ed-8dbb-fb9bbf033f80", "eventTime": "2019-07-22T17:23:05Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dbd1f8f7-9ec6-49dc-89b6-5f4ac4491e15", "record_id": "flaws_cloudtrail:0000549:dbd1f8f7-9ec6-49dc-89b6-5f4ac4491e15", "row_index": 549, "timestamp": "2019-07-22T17:23:05Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dbd1f8f7-9ec6-49dc-89b6-5f4ac4491e15", "eventTime": "2019-07-22T17:23:05Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed124890c-0f1f-4059-a0e4-366d05bce3db", "record_id": "flaws_cloudtrail:0000550:ed124890c-0f1f-4059-a0e4-366d05bce3db", "row_index": 550, "timestamp": "2019-07-22T17:23:05Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed124890c-0f1f-4059-a0e4-366d05bce3db", "eventTime": "2019-07-22T17:23:05Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "382179e1b-7d8b-48f6-bb02-9a3dece119e6", "record_id": "flaws_cloudtrail:0000551:382179e1b-7d8b-48f6-bb02-9a3dece119e6", "row_index": 551, "timestamp": "2019-07-22T17:23:05Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "382179e1b-7d8b-48f6-bb02-9a3dece119e6", "eventTime": "2019-07-22T17:23:05Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e01aadc-5525-4d8d-b273-b4ac6e0ac14a", "record_id": "flaws_cloudtrail:0000552:1e01aadc-5525-4d8d-b273-b4ac6e0ac14a", "row_index": 552, "timestamp": "2019-07-22T17:23:05Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e01aadc-5525-4d8d-b273-b4ac6e0ac14a", "eventTime": "2019-07-22T17:23:05Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "126bfaee-45ec-4452-bb1a-8fe5c0dc951e", "record_id": "flaws_cloudtrail:0000553:126bfaee-45ec-4452-bb1a-8fe5c0dc951e", "row_index": 553, "timestamp": "2019-07-22T17:23:05Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "126bfaee-45ec-4452-bb1a-8fe5c0dc951e", "eventTime": "2019-07-22T17:23:05Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f03fb6bd-6a2f-4ea6-bafd-6a23255abafb", "record_id": "flaws_cloudtrail:0000554:f03fb6bd-6a2f-4ea6-bafd-6a23255abafb", "row_index": 554, "timestamp": "2019-07-22T17:23:05Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f03fb6bd-6a2f-4ea6-bafd-6a23255abafb", "eventTime": "2019-07-22T17:23:05Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28351b79-3dbc-43f7-a772-efaf06ebeb9c", "record_id": "flaws_cloudtrail:0000555:28351b79-3dbc-43f7-a772-efaf06ebeb9c", "row_index": 555, "timestamp": "2019-07-22T17:23:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28351b79-3dbc-43f7-a772-efaf06ebeb9c", "eventTime": "2019-07-22T17:23:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d905450-6a29-42eb-b672-ad70ecc1400e", "record_id": "flaws_cloudtrail:0000556:d905450-6a29-42eb-b672-ad70ecc1400e", "row_index": 556, "timestamp": "2019-07-22T17:23:06Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d905450-6a29-42eb-b672-ad70ecc1400e", "eventTime": "2019-07-22T17:23:06Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8821b2a6-e246-4c0f-acf1-acd953d9f7bd", "record_id": "flaws_cloudtrail:0000557:8821b2a6-e246-4c0f-acf1-acd953d9f7bd", "row_index": 557, "timestamp": "2019-07-22T17:23:06Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8821b2a6-e246-4c0f-acf1-acd953d9f7bd", "eventTime": "2019-07-22T17:23:06Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0e2f0f3-0c94-4130-abe2-fbac089b6463", "record_id": "flaws_cloudtrail:0000558:f0e2f0f3-0c94-4130-abe2-fbac089b6463", "row_index": 558, "timestamp": "2019-07-22T17:23:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0e2f0f3-0c94-4130-abe2-fbac089b6463", "eventTime": "2019-07-22T17:23:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6ddd1ca-56bf-45e3-b09a-88cfdd5f15a3", "record_id": "flaws_cloudtrail:0000559:c6ddd1ca-56bf-45e3-b09a-88cfdd5f15a3", "row_index": 559, "timestamp": "2019-07-22T17:23:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6ddd1ca-56bf-45e3-b09a-88cfdd5f15a3", "eventTime": "2019-07-22T17:23:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "369a9cd7-7294-4d8c-937b-3784ead2ca83", "record_id": "flaws_cloudtrail:0000560:369a9cd7-7294-4d8c-937b-3784ead2ca83", "row_index": 560, "timestamp": "2019-07-22T17:23:06Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 865, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "369a9cd7-7294-4d8c-937b-3784ead2ca83", "eventTime": "2019-07-22T17:23:06Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a02777d-308e-4234-a99f-b721e74e579c", "record_id": "flaws_cloudtrail:0000561:a02777d-308e-4234-a99f-b721e74e579c", "row_index": 561, "timestamp": "2019-07-22T17:23:06Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a02777d-308e-4234-a99f-b721e74e579c", "eventTime": "2019-07-22T17:23:06Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e96b0ee9-7f06-4b2c-9d50-7d51a1ee6e9a", "record_id": "flaws_cloudtrail:0000562:e96b0ee9-7f06-4b2c-9d50-7d51a1ee6e9a", "row_index": 562, "timestamp": "2019-07-22T17:23:06Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e96b0ee9-7f06-4b2c-9d50-7d51a1ee6e9a", "eventTime": "2019-07-22T17:23:06Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a2744e8-f872-45ce-bc60-6d21df8c1c53", "record_id": "flaws_cloudtrail:0000563:5a2744e8-f872-45ce-bc60-6d21df8c1c53", "row_index": 563, "timestamp": "2019-07-22T17:23:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a2744e8-f872-45ce-bc60-6d21df8c1c53", "eventTime": "2019-07-22T17:23:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "464e4db0-3e14-4ba0-89ad-713d881dbc26", "record_id": "flaws_cloudtrail:0000564:464e4db0-3e14-4ba0-89ad-713d881dbc26", "row_index": 564, "timestamp": "2019-07-22T17:23:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "464e4db0-3e14-4ba0-89ad-713d881dbc26", "eventTime": "2019-07-22T17:23:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43cd35e6-bcfa-406a-90d4-1b05a06a576f", "record_id": "flaws_cloudtrail:0000565:43cd35e6-bcfa-406a-90d4-1b05a06a576f", "row_index": 565, "timestamp": "2019-07-22T17:23:06Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 863, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43cd35e6-bcfa-406a-90d4-1b05a06a576f", "eventTime": "2019-07-22T17:23:06Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f91484a-fa41-48f0-8dc8-1b8137a89a4e", "record_id": "flaws_cloudtrail:0000566:f91484a-fa41-48f0-8dc8-1b8137a89a4e", "row_index": 566, "timestamp": "2019-07-22T17:23:06Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f91484a-fa41-48f0-8dc8-1b8137a89a4e", "eventTime": "2019-07-22T17:23:06Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "722bdd67-cb5d-41b7-a45d-f7c8c5358806", "record_id": "flaws_cloudtrail:0000567:722bdd67-cb5d-41b7-a45d-f7c8c5358806", "row_index": 567, "timestamp": "2019-07-22T17:23:06Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 865, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "722bdd67-cb5d-41b7-a45d-f7c8c5358806", "eventTime": "2019-07-22T17:23:06Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "276a3b6d-bd6a-4482-b16d-028cf283adc6", "record_id": "flaws_cloudtrail:0000568:276a3b6d-bd6a-4482-b16d-028cf283adc6", "row_index": 568, "timestamp": "2019-07-22T17:23:06Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "276a3b6d-bd6a-4482-b16d-028cf283adc6", "eventTime": "2019-07-22T17:23:06Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e5ce9e9-3f7a-46c2-bd0d-b4eca52deff4", "record_id": "flaws_cloudtrail:0000569:0e5ce9e9-3f7a-46c2-bd0d-b4eca52deff4", "row_index": 569, "timestamp": "2019-07-22T17:23:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e5ce9e9-3f7a-46c2-bd0d-b4eca52deff4", "eventTime": "2019-07-22T17:23:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28351b79-3dbc-43f7-a772-efaf06ebeb9c", "record_id": "flaws_cloudtrail:0000570:28351b79-3dbc-43f7-a772-efaf06ebeb9c", "row_index": 570, "timestamp": "2019-07-22T17:23:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28351b79-3dbc-43f7-a772-efaf06ebeb9c", "eventTime": "2019-07-22T17:23:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d905450-6a29-42eb-b672-ad70ecc1400e", "record_id": "flaws_cloudtrail:0000571:d905450-6a29-42eb-b672-ad70ecc1400e", "row_index": 571, "timestamp": "2019-07-22T17:23:06Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d905450-6a29-42eb-b672-ad70ecc1400e", "eventTime": "2019-07-22T17:23:06Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8821b2a6-e246-4c0f-acf1-acd953d9f7bd", "record_id": "flaws_cloudtrail:0000572:8821b2a6-e246-4c0f-acf1-acd953d9f7bd", "row_index": 572, "timestamp": "2019-07-22T17:23:06Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8821b2a6-e246-4c0f-acf1-acd953d9f7bd", "eventTime": "2019-07-22T17:23:06Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0e2f0f3-0c94-4130-abe2-fbac089b6463", "record_id": "flaws_cloudtrail:0000573:f0e2f0f3-0c94-4130-abe2-fbac089b6463", "row_index": 573, "timestamp": "2019-07-22T17:23:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0e2f0f3-0c94-4130-abe2-fbac089b6463", "eventTime": "2019-07-22T17:23:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6ddd1ca-56bf-45e3-b09a-88cfdd5f15a3", "record_id": "flaws_cloudtrail:0000574:c6ddd1ca-56bf-45e3-b09a-88cfdd5f15a3", "row_index": 574, "timestamp": "2019-07-22T17:23:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6ddd1ca-56bf-45e3-b09a-88cfdd5f15a3", "eventTime": "2019-07-22T17:23:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "369a9cd7-7294-4d8c-937b-3784ead2ca83", "record_id": "flaws_cloudtrail:0000575:369a9cd7-7294-4d8c-937b-3784ead2ca83", "row_index": 575, "timestamp": "2019-07-22T17:23:06Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 865, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "369a9cd7-7294-4d8c-937b-3784ead2ca83", "eventTime": "2019-07-22T17:23:06Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a02777d-308e-4234-a99f-b721e74e579c", "record_id": "flaws_cloudtrail:0000576:a02777d-308e-4234-a99f-b721e74e579c", "row_index": 576, "timestamp": "2019-07-22T17:23:06Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a02777d-308e-4234-a99f-b721e74e579c", "eventTime": "2019-07-22T17:23:06Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e96b0ee9-7f06-4b2c-9d50-7d51a1ee6e9a", "record_id": "flaws_cloudtrail:0000577:e96b0ee9-7f06-4b2c-9d50-7d51a1ee6e9a", "row_index": 577, "timestamp": "2019-07-22T17:23:06Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e96b0ee9-7f06-4b2c-9d50-7d51a1ee6e9a", "eventTime": "2019-07-22T17:23:06Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a2744e8-f872-45ce-bc60-6d21df8c1c53", "record_id": "flaws_cloudtrail:0000578:5a2744e8-f872-45ce-bc60-6d21df8c1c53", "row_index": 578, "timestamp": "2019-07-22T17:23:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a2744e8-f872-45ce-bc60-6d21df8c1c53", "eventTime": "2019-07-22T17:23:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "464e4db0-3e14-4ba0-89ad-713d881dbc26", "record_id": "flaws_cloudtrail:0000579:464e4db0-3e14-4ba0-89ad-713d881dbc26", "row_index": 579, "timestamp": "2019-07-22T17:23:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "464e4db0-3e14-4ba0-89ad-713d881dbc26", "eventTime": "2019-07-22T17:23:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43cd35e6-bcfa-406a-90d4-1b05a06a576f", "record_id": "flaws_cloudtrail:0000580:43cd35e6-bcfa-406a-90d4-1b05a06a576f", "row_index": 580, "timestamp": "2019-07-22T17:23:06Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 863, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43cd35e6-bcfa-406a-90d4-1b05a06a576f", "eventTime": "2019-07-22T17:23:06Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f91484a-fa41-48f0-8dc8-1b8137a89a4e", "record_id": "flaws_cloudtrail:0000581:f91484a-fa41-48f0-8dc8-1b8137a89a4e", "row_index": 581, "timestamp": "2019-07-22T17:23:06Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f91484a-fa41-48f0-8dc8-1b8137a89a4e", "eventTime": "2019-07-22T17:23:06Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "722bdd67-cb5d-41b7-a45d-f7c8c5358806", "record_id": "flaws_cloudtrail:0000582:722bdd67-cb5d-41b7-a45d-f7c8c5358806", "row_index": 582, "timestamp": "2019-07-22T17:23:06Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 865, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "722bdd67-cb5d-41b7-a45d-f7c8c5358806", "eventTime": "2019-07-22T17:23:06Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "276a3b6d-bd6a-4482-b16d-028cf283adc6", "record_id": "flaws_cloudtrail:0000583:276a3b6d-bd6a-4482-b16d-028cf283adc6", "row_index": 583, "timestamp": "2019-07-22T17:23:06Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "276a3b6d-bd6a-4482-b16d-028cf283adc6", "eventTime": "2019-07-22T17:23:06Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e5ce9e9-3f7a-46c2-bd0d-b4eca52deff4", "record_id": "flaws_cloudtrail:0000584:0e5ce9e9-3f7a-46c2-bd0d-b4eca52deff4", "row_index": 584, "timestamp": "2019-07-22T17:23:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e5ce9e9-3f7a-46c2-bd0d-b4eca52deff4", "eventTime": "2019-07-22T17:23:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37100e62-ab9d-43bb-bf06-345241a83f", "record_id": "flaws_cloudtrail:0000585:37100e62-ab9d-43bb-bf06-345241a83f", "row_index": 585, "timestamp": "2019-07-22T17:23:07Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37100e62-ab9d-43bb-bf06-345241a83f", "eventTime": "2019-07-22T17:23:07Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52a45eaa-fd2b-49db-90ee-583cc1a4cec2", "record_id": "flaws_cloudtrail:0000586:52a45eaa-fd2b-49db-90ee-583cc1a4cec2", "row_index": 586, "timestamp": "2019-07-22T17:23:07Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52a45eaa-fd2b-49db-90ee-583cc1a4cec2", "eventTime": "2019-07-22T17:23:07Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "549c8c54-585c-4740-94fc-e97d20582cf0", "record_id": "flaws_cloudtrail:0000587:549c8c54-585c-4740-94fc-e97d20582cf0", "row_index": 587, "timestamp": "2019-07-22T17:23:07Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "549c8c54-585c-4740-94fc-e97d20582cf0", "eventTime": "2019-07-22T17:23:07Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dce9cf78-0587-4a60-8816-7c2dc61e356e", "record_id": "flaws_cloudtrail:0000588:dce9cf78-0587-4a60-8816-7c2dc61e356e", "row_index": 588, "timestamp": "2019-07-22T17:23:07Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dce9cf78-0587-4a60-8816-7c2dc61e356e", "eventTime": "2019-07-22T17:23:07Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6db5fdbc-f2b7-4b74-90ca-0cb9f0611674", "record_id": "flaws_cloudtrail:0000589:6db5fdbc-f2b7-4b74-90ca-0cb9f0611674", "row_index": 589, "timestamp": "2019-07-22T17:23:07Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6db5fdbc-f2b7-4b74-90ca-0cb9f0611674", "eventTime": "2019-07-22T17:23:07Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24f835781-5aef-491a-aff7-342ddee7d5a6", "record_id": "flaws_cloudtrail:0000590:24f835781-5aef-491a-aff7-342ddee7d5a6", "row_index": 590, "timestamp": "2019-07-22T17:23:07Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24f835781-5aef-491a-aff7-342ddee7d5a6", "eventTime": "2019-07-22T17:23:07Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "656d3dfc-cd0b-43d7-9d0c-8a7a23b57b50", "record_id": "flaws_cloudtrail:0000591:656d3dfc-cd0b-43d7-9d0c-8a7a23b57b50", "row_index": 591, "timestamp": "2019-07-22T17:23:07Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "656d3dfc-cd0b-43d7-9d0c-8a7a23b57b50", "eventTime": "2019-07-22T17:23:07Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90617c-73ab-4638-8b5e-3e84caa62090", "record_id": "flaws_cloudtrail:0000592:90617c-73ab-4638-8b5e-3e84caa62090", "row_index": 592, "timestamp": "2019-07-22T17:23:07Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90617c-73ab-4638-8b5e-3e84caa62090", "eventTime": "2019-07-22T17:23:07Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "645eb419-7612-4b2f-8b3d-2300402eb858", "record_id": "flaws_cloudtrail:0000593:645eb419-7612-4b2f-8b3d-2300402eb858", "row_index": 593, "timestamp": "2019-07-22T17:23:07Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "645eb419-7612-4b2f-8b3d-2300402eb858", "eventTime": "2019-07-22T17:23:07Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03990a80-cce8-49f1-ba1b-deb1948c9d79", "record_id": "flaws_cloudtrail:0000594:03990a80-cce8-49f1-ba1b-deb1948c9d79", "row_index": 594, "timestamp": "2019-07-22T17:23:07Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03990a80-cce8-49f1-ba1b-deb1948c9d79", "eventTime": "2019-07-22T17:23:07Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3b6a6e6-7185-4177-bd7e-f35072bb7aac", "record_id": "flaws_cloudtrail:0000595:c3b6a6e6-7185-4177-bd7e-f35072bb7aac", "row_index": 595, "timestamp": "2019-07-22T17:23:07Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3b6a6e6-7185-4177-bd7e-f35072bb7aac", "eventTime": "2019-07-22T17:23:07Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7e3b412-b5cc-4f38-a0c9-c5c51e43f7eb", "record_id": "flaws_cloudtrail:0000596:a7e3b412-b5cc-4f38-a0c9-c5c51e43f7eb", "row_index": 596, "timestamp": "2019-07-22T17:23:07Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7e3b412-b5cc-4f38-a0c9-c5c51e43f7eb", "eventTime": "2019-07-22T17:23:07Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "979e9fac-8896-431a-ab69-2ae9c058de96", "record_id": "flaws_cloudtrail:0000597:979e9fac-8896-431a-ab69-2ae9c058de96", "row_index": 597, "timestamp": "2019-07-22T17:23:07Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 863, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "979e9fac-8896-431a-ab69-2ae9c058de96", "eventTime": "2019-07-22T17:23:07Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c5bd1e2-95b7-4d28-a2fa-e7866a205aa3", "record_id": "flaws_cloudtrail:0000598:3c5bd1e2-95b7-4d28-a2fa-e7866a205aa3", "row_index": 598, "timestamp": "2019-07-22T17:23:07Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c5bd1e2-95b7-4d28-a2fa-e7866a205aa3", "eventTime": "2019-07-22T17:23:07Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8393b2c8-0e9a-40e3-a701-3b92fec2e71c", "record_id": "flaws_cloudtrail:0000599:8393b2c8-0e9a-40e3-a701-3b92fec2e71c", "row_index": 599, "timestamp": "2019-07-22T17:23:07Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 863, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8393b2c8-0e9a-40e3-a701-3b92fec2e71c", "eventTime": "2019-07-22T17:23:07Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3946fa75-b2d8-4046-81bb-4ccd8b00da59", "record_id": "flaws_cloudtrail:0000600:3946fa75-b2d8-4046-81bb-4ccd8b00da59", "row_index": 600, "timestamp": "2019-07-22T17:23:07Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 865, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3946fa75-b2d8-4046-81bb-4ccd8b00da59", "eventTime": "2019-07-22T17:23:07Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41f3a45e-c5ce-413c-9037-5118d81d1ecd", "record_id": "flaws_cloudtrail:0000601:41f3a45e-c5ce-413c-9037-5118d81d1ecd", "row_index": 601, "timestamp": "2019-07-22T17:23:07Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41f3a45e-c5ce-413c-9037-5118d81d1ecd", "eventTime": "2019-07-22T17:23:07Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eaa620302-d8a5-4cc3-95bc-5461a335ac29", "record_id": "flaws_cloudtrail:0000602:eaa620302-d8a5-4cc3-95bc-5461a335ac29", "row_index": 602, "timestamp": "2019-07-22T17:23:07Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eaa620302-d8a5-4cc3-95bc-5461a335ac29", "eventTime": "2019-07-22T17:23:07Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea4999aa-84ed-4562-b015-b4072ea79f1f", "record_id": "flaws_cloudtrail:0000603:ea4999aa-84ed-4562-b015-b4072ea79f1f", "row_index": 603, "timestamp": "2019-07-22T17:23:07Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 922, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea4999aa-84ed-4562-b015-b4072ea79f1f", "eventTime": "2019-07-22T17:23:07Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticfilesystem:DescribeFileSystems on resource: arn:aws:elasticfilesystem:us-east-1:811596193553:file-system/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e86a8d1b-0be7-4875-9528-68ca0da2fcab", "record_id": "flaws_cloudtrail:0000604:e86a8d1b-0be7-4875-9528-68ca0da2fcab", "row_index": 604, "timestamp": "2019-07-22T17:23:07Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 863, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e86a8d1b-0be7-4875-9528-68ca0da2fcab", "eventTime": "2019-07-22T17:23:07Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterSecurityGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a255f46-4ad4-44dc-b362-4fbd7276e939", "record_id": "flaws_cloudtrail:0000605:5a255f46-4ad4-44dc-b362-4fbd7276e939", "row_index": 605, "timestamp": "2019-07-22T17:23:07Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "211.111.151.81", "user_agent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 865, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a255f46-4ad4-44dc-b362-4fbd7276e939", "eventTime": "2019-07-22T17:23:07Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "211.111.151.81", "userAgent": "Boto3/1.9.192 Python/3.5.3 Linux/4.9.0-9-amd64 Botocore/1.12.192", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: redshift:DescribeClusterParameterGroups on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}